Posted 2 days ago
Engineer - OT Cybersecurity
Job description
Job Description Summary As an Engineer - OT Cybersecurity, you will be responsible for the day-to-day execution of cybersecurity for GE Vernova’s Power Conversion and Storage (PCS) business lines Operational Technology (OT) portfolio. You will bridge the gap between secure product architecture and regulatory compliance. You will collaborate with global stakeholders to design secure-by-design control systems, manage vulnerability lifecycles, and ensure our portfolio meets rigorous cybersecurity standards. This position offers a high degree of flexibility and the opportunity to influence the security posture of critical global energy infrastructure. Job Description Roles and
Responsibilities
Architecture & Design: Collaborate with system/subsystem leads to define and develop top-level control system & software requirements, ensuring security, modularity, and futureproofing. Compliance & Certification: Ensure adherence to IEC 62443 and other global standards. Maintain Secure Deployment Guides for control systems and 3rd-party interfaces. Technical Documentation: Produce and own technical architecture, design, and verification documentation. Ensure all technical data aligns with corporate security policies. Hardening & Operations: Implement and audit security controls, including Active Directory, certificate management, and system hardening (CIS Benchmarks, STIG) for switches, workstations, and controllers. Security Infrastructure: Configure and deploy firewall, SIEM, NIDS, and HIDS solutions within the OT environment. Secure Development Lifecycle (SDLC): Partner with development teams to integrate security into the SDLC. Manage/execute OSS, SAST, and DAST scans and streamline SBOM generation to ensure supply chain security. Vulnerability & Risk Management: Own the end-to-end vulnerability lifecycle. Scope and perform hardware/software vulnerability identification, threat modeling, and attack surface analysis/reduction. Required
Qualifications
Bachelor’s/Master’s degree in Electronics or Electrical Engineering, or a related technical field. 3–5 years of professional experience in Cybersecurity, with specific experience in the OT/ICS space. Strong technical proficiency with Wireshark, Nessus, Nmap, and vulnerability management tools. Demonstrated experience with OT hardening (CIS Benchmarks, STIG), Certificate Management, and Active Directory. Familiarity with ISA/IEC 62443, threat modeling, and risk assessment methodologies.
Experience
in DevSecOps practices (SAST/DAST/SBOM) within a software/firmware development context. Desired
Qualifications
Certifications: CCNA, ISA/IEC 62443 CFS/RA, Security+ will be an added advantage. Hands-on experience with SIEM, NIDS, and HIDS deployment in OT/Industrial environments.
Experience
with Industrial Control Systems (ICS) or OT security in an energy or manufacturing environment. Additional Information Relocation Assistance Provided: Yes Addressing the climate crisis is an urgent global priority and we take our responsibility seriously. That is our singular mission at GE Vernova: continuing to electrify the world while simultaneously working to help decarbonize it. If we want our energy future to be different…we must be different. Our mission is embedded in our name. We retain our treasured legacy, “GE,” in our name as an enduring and hard-earned badge of quality and ingenuity. “Ver” / “verde” signal Earth’s verdant and lush ecosystems. “Nova,” from the Latin “novus,” nods to a new, innovative era of lower carbon energy that GE Vernova will help deliver. Together, we have The Energy to Change the World. www.gevernova.com