Senior Cybersecurity Engineer (Center of Excellence)

Job Description Summary

We are looking for a senior OT cybersecurity engineer to join the Grid Automation Cybersecurity Centre of Excellence (COE), a new central team that owns how cybersecurity is executed on GA projects worldwide.

The role is hands-on. You will design, build, configure, test and optionally commission security solutions on complex utility and industrial projects. You will then turn that work into the standards, templates and training that regional teams use on every project that follows.

You will be the recognized technical owner for a set of solutions in the GA cybersecurity portfolio, covering areas such as firewalls, OT network monitoring, secure remote access, identity, PKI, SIEM, etc... Regional teams will come to you when a project goes beyond their depth.

You will also make execution faster and more consistent. That means automating repeatable build and verification work in PowerShell, and using frontier AI models to shorten documentation, requirements mapping and configuration review, while engineering judgement and the protection of customer data stay firmly with you.

Job Description

About the Cybersecurity COE

The COE gives GA a single owner for cybersecurity execution standards and process across all regions. It reports into the GA OT Cybersecurity Product Line and covers five functions

• Delivery of complex project scope, and specialist support to regions on demand.

• A standard execution toolkit: security plans, reference architectures, checklists, templates and automation scripts that regions can apply directly.

• A structured competency programme of periodic technical and non-technical training.

• Formal cybersecurity reviews at key project milestones.

• Regulatory intelligence on IEC 62443, NERC CIP, NIS2, CRA and regional mandates, so execution teams are ready for compliance before customers ask.

Roles and Responsibilities

Project execution

• Lead the cybersecurity workstream on Tier 1 projects end to end: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.

• Work hands-on in staging and at customer sites: build and harden Windows and Linux servers, and configure firewalls, Active Directory, PKI, KDC, network intrusion detection, SIEM and syslog, application control, backup and recovery, and secure remote access.

• Produce the project security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package.

• Map customer requirements to contract scope early, flag deviations as they arise, and give project managers the technical basis for change orders.

• Support tender and project teams with scope definition and effort estimates for complex cybersecurity scope.

Execution standards and toolkit

• Act as the technical owner (Expert) for an assigned set of COE competencies. Set the reference configuration for each and keep it current with product and partner releases.

• Build the GA execution toolkit as a by-product of delivery: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.

• Run formal design and configuration reviews at project milestones, so misconfigurations are found before FAT and handover rather than by the customer.

• Capture lessons learned at project close and feed them back into the toolkit.

Automation and AI-assisted execution

• Write and maintain PowerShell scripts and modules that automate repeatable execution tasks: Windows Server and workstation hardening, Active Directory and Group Policy build, account and group provisioning, certificate enrolment, audit policy and log forwarding setup, and backup job configuration.

• Build automated checks that compare as-built systems against the COE reference baselines and produce the evidence for milestone reviews, FAT and SAT, so verification no longer depends on manual screenshots and spot checks.

• Use frontier AI models to speed up execution work: drafting and reviewing security plans, test procedures and as-built documents; mapping customer specifications against IEC 62443-3-3 requirements; analysing firewall rule bases, configuration exports and logs; and writing and reviewing scripts.

• Use AI only within GE Vernova approved platforms and data-handling rules. Customer configurations, network drawings and logs from critical infrastructure stay inside approved boundaries, and an engineer verifies every AI output before it reaches a customer or a live system.

• Turn proven scripts, prompts and AI-assisted workflows into toolkit assets, so regional engineers get the same gains on Tier 2 and Tier 3 projects.

Competency building

• Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.

• Coach regional engineers on live projects, so that project types can move from Tier 1 to Tier 2, and from Tier 2 to Tier 3.

• Maintain independent working capability (Backup) in competencies owned by COE colleagues, so the team keeps delivering when one person is unavailable.

Specialist support and regulatory intelligence

• Provide on-demand support to regional teams on design questions, site troubleshooting and escalations.

• Support patch management, vulnerability assessment and incident response engagements on GA-delivered systems, working with Product Security.

• Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables.

• Help regional teams answer customer compliance questions that arise during project execution.

Product and partner feedback

• Feed field experience back to Product Management and R&D: integration issues, recurring defects and gaps in the portfolio.

• Support validation and first deployments of new GA cybersecurity solutions as they c