Southern Company
Operational Technology Cyber Security Engineer/Analyst
Southern Company, Birmingham, Alabama, United States, 35275
Job Description
POSITION SUMMARY
Southern Company recognizes that maintaining a reliable generating fleet requires a robust cyber security program to protect our infrastructure, data, and operations. To strengthen our cybersecurity efforts, we are seeking a skilled Operational Cyber Security Engineer/Analyst to join our team and help safeguard our critical assets. You will work in a dynamic and challenging environment where your expertise in cybersecurity will contribute to the advancement of the Generation Cyber Security Program.
The OT Cyber Security Engineer/Analyst will work as a member of the team to perform duties ranging from cyber assessments at generation facilities focusing on NERC CIP requirements and Southern Company's cyber standards, cyber security reviews for new projects, developing technical documentation, and participating on project teams as needed based on upcoming regulations.
The successful candidate will expand capabilities and expertise of the team in the areas of networking, connectivity, cyber security processes such as disaster recovery, patch management, etc. and cyber security tools such as Splunk, internal network and security monitoring, etc.
This position is best suited for an individual with the following traits: excellent communication (written, oral, and active listening), inquiring mindset, compliance focused, continuous learner. A substantial portion of this role is spent documenting and authoring reports.
KEY JOB RESPONSIBILITIES Deliver a cohesive and consistent message about the Program, Policies, and Requirements when interacting with customers and colleagues. Support automation of information reporting for cyber standards compliance. Lead cyber assessments regarding compliance to Company Policies and Requirements. Document cyber assessment in formal report. Provide technical analysis by conducting Cyber Security Reviews for new industrial control system or operational technology-related projects. Develop and maintain technical documentation such as reports, network diagrams, etc. Participate on project teams as needed to implement NERC CIP requirements. POSITION QUALIFICATIONS
Education & Experience:
Bachelor's degree from an accredited university in Engineering, Computer Science, or Information Systems is preferred. Security certification preferred. Work experience may be considered in lieu of a degree. Experience working with and securing Industrial Control System/SCADA. Experience with ICS/OT security standards and frameworks (e.g., NERC CIP, NIST SP 800-82). Experience with systems security management. Knowledge, Skills & Abilities:
Ability to draft technical reports based on assessment findings and observations. Experience working with regulatory audit documentation and processes. Effective interpersonal skills and ability to create and maintain positive working relationships. Strong teamwork and customer focus. Fundamental understanding of industrial network communication protocols (For example: TCP/IP, UDP, Modbus, OPC, etc.) Experience with enterprise network and security infrastructure a plus. Ability to classify priorities and escalate issues based on severity. Proficiency in Microsoft Office, specifically Excel. Ability to work with limited direction and contribute individually. WORK LOCATION, SCHEDULE, & TRAVEL
This position is located at The Energy Center office in Birmingham, AL. Candidates residing outside the area may also be considered, provided they can effectively telework and are willing to travel to the office or field locations regularly (as determined) and as needed. Hybrid work schedule (both in-office and telecommute); currently three (3) days in-office and two (2) days telecommute (subject to adjustment). This position will require some travel (day and overnight, up to 25%) BENEFITS
Competitive Pay Excellent benefits packages which include:
Medical and dental coverage Defined Pension/Cash Balance Benefit Plan Performance-sharing plan 401(k) plan with a generous company match Bonus opportunities Tuition Reimbursement
***Please submit an updated resume with your application***
About Us
Southern Company (NYSE: SO) is a leading energy provider serving 9 million residential and commercial customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy infrastructure company with national capabilities, a fiber optics network, and telecommunications services. Through an industry-leading commitment to innovation, resilience, and sustainability, we are taking action to meet our customers' and communities' needs while advancing our commitment to net zero emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture and hiring practices have earned the company national awards and recognition from numerous organizations, including Forbes, Military Times, DiversityInc, Black Enterprise, J.D. Power, Fortune, Human Rights Campaign and more. To learn more, visit www.southerncompany.com.
Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.
About the Team
Southern Company Services
POSITION SUMMARY
Southern Company recognizes that maintaining a reliable generating fleet requires a robust cyber security program to protect our infrastructure, data, and operations. To strengthen our cybersecurity efforts, we are seeking a skilled Operational Cyber Security Engineer/Analyst to join our team and help safeguard our critical assets. You will work in a dynamic and challenging environment where your expertise in cybersecurity will contribute to the advancement of the Generation Cyber Security Program.
The OT Cyber Security Engineer/Analyst will work as a member of the team to perform duties ranging from cyber assessments at generation facilities focusing on NERC CIP requirements and Southern Company's cyber standards, cyber security reviews for new projects, developing technical documentation, and participating on project teams as needed based on upcoming regulations.
The successful candidate will expand capabilities and expertise of the team in the areas of networking, connectivity, cyber security processes such as disaster recovery, patch management, etc. and cyber security tools such as Splunk, internal network and security monitoring, etc.
This position is best suited for an individual with the following traits: excellent communication (written, oral, and active listening), inquiring mindset, compliance focused, continuous learner. A substantial portion of this role is spent documenting and authoring reports.
KEY JOB RESPONSIBILITIES Deliver a cohesive and consistent message about the Program, Policies, and Requirements when interacting with customers and colleagues. Support automation of information reporting for cyber standards compliance. Lead cyber assessments regarding compliance to Company Policies and Requirements. Document cyber assessment in formal report. Provide technical analysis by conducting Cyber Security Reviews for new industrial control system or operational technology-related projects. Develop and maintain technical documentation such as reports, network diagrams, etc. Participate on project teams as needed to implement NERC CIP requirements. POSITION QUALIFICATIONS
Education & Experience:
Bachelor's degree from an accredited university in Engineering, Computer Science, or Information Systems is preferred. Security certification preferred. Work experience may be considered in lieu of a degree. Experience working with and securing Industrial Control System/SCADA. Experience with ICS/OT security standards and frameworks (e.g., NERC CIP, NIST SP 800-82). Experience with systems security management. Knowledge, Skills & Abilities:
Ability to draft technical reports based on assessment findings and observations. Experience working with regulatory audit documentation and processes. Effective interpersonal skills and ability to create and maintain positive working relationships. Strong teamwork and customer focus. Fundamental understanding of industrial network communication protocols (For example: TCP/IP, UDP, Modbus, OPC, etc.) Experience with enterprise network and security infrastructure a plus. Ability to classify priorities and escalate issues based on severity. Proficiency in Microsoft Office, specifically Excel. Ability to work with limited direction and contribute individually. WORK LOCATION, SCHEDULE, & TRAVEL
This position is located at The Energy Center office in Birmingham, AL. Candidates residing outside the area may also be considered, provided they can effectively telework and are willing to travel to the office or field locations regularly (as determined) and as needed. Hybrid work schedule (both in-office and telecommute); currently three (3) days in-office and two (2) days telecommute (subject to adjustment). This position will require some travel (day and overnight, up to 25%) BENEFITS
Competitive Pay Excellent benefits packages which include:
Medical and dental coverage Defined Pension/Cash Balance Benefit Plan Performance-sharing plan 401(k) plan with a generous company match Bonus opportunities Tuition Reimbursement
***Please submit an updated resume with your application***
About Us
Southern Company (NYSE: SO) is a leading energy provider serving 9 million residential and commercial customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy infrastructure company with national capabilities, a fiber optics network, and telecommunications services. Through an industry-leading commitment to innovation, resilience, and sustainability, we are taking action to meet our customers' and communities' needs while advancing our commitment to net zero emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture and hiring practices have earned the company national awards and recognition from numerous organizations, including Forbes, Military Times, DiversityInc, Black Enterprise, J.D. Power, Fortune, Human Rights Campaign and more. To learn more, visit www.southerncompany.com.
Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.
About the Team
Southern Company Services