Senior Cybersecurity Engineer (Center of Excellence)

Overview

Senior OT cybersecurity engineer for the Grid Automation Cybersecurity Centre of Excellence, a central team that owns cybersecurity execution standards and delivers complex projects worldwide. The role is hands-on: designing, building, configuring, testing and optionally commissioning security solutions, then turning that work into standards, templates and training for regional teams.

What you'll do

• Lead the cybersecurity workstream on Tier 1 projects end to end: requirements review, security architecture, detailed design, build, configuration, FAT, SAT, commissioning and handover.
• Work hands-on in staging and at customer sites: build and harden Windows and Linux servers, and configure firewalls, Active Directory, PKI, KDC, network intrusion detection, SIEM and syslog, application control, backup and recovery, and secure remote access.
• Produce project security deliverables: security plan, zone and conduit model, risk assessment, hardening records, test procedures and reports, and the security handover package.
• Map customer requirements to contract scope early, flag deviations as they arise, and give project managers the technical basis for change orders.
• Support tender and project teams with scope definition and effort estimates for complex cybersecurity scope.
• Act as technical owner (Expert) for an assigned set of COE competencies, setting reference configurations and keeping them current with product and partner releases.
• Build the GA execution toolkit as a by-product of delivery: reference architectures, configuration baselines, build checklists, PowerShell scripts, how-to guides, test procedures and templates.
• Run formal design and configuration reviews at project milestones, and capture lessons learned at project close to feed back into the toolkit.
• Write and maintain PowerShell scripts and modules that automate repeatable execution tasks, including Windows Server and workstation hardening, Active Directory and Group Policy build, account and group provisioning, certificate enrolment, audit policy and log forwarding setup, and backup job configuration.
• Build automated checks that compare as-built systems against COE reference baselines and produce evidence for milestone reviews, FAT and SAT.
• Use frontier AI models within GE Vernova approved platforms to draft and review security plans, test procedures and as-built documents, map specifications against IEC 62443-3-3, analyse firewall rule bases, configuration exports and logs, and write and review scripts; an engineer verifies every AI output before it reaches a customer or live system.
• Turn proven scripts, prompts and AI-assisted workflows into toolkit assets for regional engineers.
• Design and deliver structured technical training for regional engineers, from foundation to advanced level, on the solutions you own.
• Coach regional engineers on live projects so project types can move from Tier 1 to Tier 2, and from Tier 2 to Tier 3.
• Maintain independent working capability (Backup) in competencies owned by COE colleagues.
• Provide on-demand support to regional teams on design questions, site troubleshooting and escalations.
• Support patch management, vulnerability assessment and incident response engagements on GA-delivered systems, working with Product Security.
• Track IEC 62443, NERC CIP, NIS2, CRA, IEC 62351 and regional mandates, and translate new requirements into execution checklists and deliverables.
• Help regional teams answer customer compliance questions that arise during project execution.
• Feed field experience back to Product Management and R&D, support validation and first deployments of new GA cybersecurity solutions through NPI, and work with technology partners on integration, escalations and joint validation.

What you'll need

• Bachelor's or master's degree in Electrical, Electronics or Computer Engineering, Computer Science, or equivalent work experience.
• 8+ years in industrial automation or the energy sector, including at least 5 years delivering OT cybersecurity hands-on on customer projects, from design through commissioning.
• Applied knowledge of IEC 62443 on real projects, in particular 3-2 (risk assessment, zones and conduits), 3-3 (system security requirements and security levels) and 2-4 (service provider requirements).
• Working knowledge of NERC CIP, NIS2, CRA, IEC 62351 and NIST guidance, and how each translates into project deliverables.
• Expert-level, hands-on depth in at least three of the following areas, and working capability in most of the rest: next-generation firewalls (Fortinet preferred); OT network intrusion detection and monitoring (Nozomi, Dragos or similar); secure remote access for industrial systems (Xona or similar); Active Directory, Group Policy, RADIUS and LDAP; public key infrastructure and certificate lifecycle management; SIEM and syslog collection (Splunk or similar); centralised security management platforms; application control and host intrusion prevention (Trellix or similar); backup and disaster recovery; Windows and Linux server build, hardening and virtualisation; hardening of IEDs, RTUs, gateways and other field devices.
• Sound understanding of substation and grid automation (protection and control, RTUs, gateways, SCADA and EMS) and the protocols that run them: IEC 61850, DNP3, IEC 60870-5-104 and Modbus.
• Working proficiency in PowerShell for Windows Server and Active Directory administration: the ActiveDirectory and GroupPolicy modules, remoting, error handling and logging, and running signed scripts under restricted execution policies typical of OT environments.
• Practical, regular use of frontier AI models (such as Claude, ChatGPT, Gemini or Microsoft Copilot) in engineering work, with the judgement to check outputs, catch errors and keep sensitive customer data out of unapproved tools.
• A track record of producing project security documentation that customers and auditors accept.
• Experience training and mentoring engineers.
• Willingness to travel 20–40%, including extended site stays, and to join calls across time zones.

Nice to have

• Certifications such as GICSP, GRID, ISA/IEC 62443 Cybersecurity Expert (or its specialist certificates), CISSP, Fortinet FCP or FCSS (formerly NSE 4 and NSE 7), Splunk Core Certified, or vendor training on Nozomi or Dragos.
• Experience as the cybersecurity lead on large utility, data centre or industrial projects with multiple vendors and a demanding customer.
• Experience building AI-assisted engineering workflows, such as structured prompt libraries, agent-based tools or API integrations, for document generation, requirements mapping or log triage.
• Configuration-as-code and scripting discipline: PowerShell DSC or Ansible, Pester tests for scripts, Git version control, and Bash or Python for Linux systems.
• Writes clear, precise documentation that an engineer who has never met the author can follow.
• Teaches well and can explain a design decision to a junior engineer and defend it to a customer's security team.
• Holds scope boundaries with customers firmly and professionally.
• Works comfortably in a global organisation with people from many cultures and backgrounds.
• Additional languages.
• Takes ownership and treats a problem found on one project as a gap in the toolkit to be fixed.

Details

• Location: Hyderabad.
• Relocation assistance provided.
• Candidates may be subject to heightened security checks as directed by the client, given the role involves a client's critical infrastructure.