Cyber Security Analyst I-IV

Job Description

Job Description

Cyber Security Analyst I-IV, Security Operations (OT/ICS)

Protect the Technology That Helps Power the Electric Grid

Georgia System Operations Corporation (GSOC) is seeking a Cyber Security Analyst to help secure the industrial control systems that support the electric grid. This opportunity may be filled at Level I, II, III, or IV based on the selected candidate's education, experience, and demonstrated capabilities.

This is an opportunity for candidates ranging from those beginning their cybersecurity careers to experienced professionals prepared to provide technical leadership and subject-matter expertise. Depending on level, the role progresses from frontline monitoring and operational support to advanced threat hunting, vulnerability management, incident-response strategy, mentoring, and cybersecurity program leadership.

This is an onsite position in Tucker, GA and it is not eligible for visa sponsorship

What You'll Do

As a Cyber Security Analyst I-IV, you will contribute to Security Operations activities that protect GSOC systems and support reliable grid operations. Responsibilities will vary by level and may include:

• Monitor and respond to security alerts, configuration changes, user-account activity, and other security events, escalating events that require additional investigation or remediation.
• Provide security-related user support and diagnose and resolve security events appropriate to your level of responsibility.
• Support asset, access, and change-management processes and help maintain complete, accurate, and timely security and asset information.
• Support security monitoring, incident response, vulnerability assessment, and related cybersecurity activities.
• Maintain knowledge of NERC Critical Infrastructure Protection (CIP) standards and create or maintain documentation and evidence supporting regulatory compliance.
• At more experienced levels, develop and implement security-monitoring and incident-response strategies for operational technology systems.
• Manage or contribute to vulnerability management, including security assessments, vulnerability scans, risk prioritization, and mitigation strategies.
• Use threat-intelligence sources to support threat hunting and analysis.
• At senior levels, lead and mentor cybersecurity operators and analysts and help advance security policies, procedures, standards, guidelines, and program documentation.

What You Bring

• Bachelor's degree in Information Systems or a related field. Equivalent combinations of education and directly relevant experience may be considered.
• Relevant experience in industrial control systems, information technology, or information security; required experience varies by level.
• Strong technical, analytical, problem-solving, customer-service, and communication skills.
• Ability to evaluate security events across operating-system and appliance platforms, exercise sound judgment, document findings, and adapt to changing technologies and compliance requirements.
• Ability to collaborate with diverse stakeholders and pass a NERC CIP personnel risk assessment screening.

Leveling Overview

The position will be filled at the level that best matches the selected candidate's experience and capabilities.

Level I – Ideally, 0-2 years with a bachelor's degree, 2+ years with an associate degree, or 4+ years with a high school diploma. Provides frontline monitoring, Tier 1 support, alert review, and asset, account, change, and compliance support.

Level II – Ideally, 2+ years with a bachelor's degree, 4+ years with an associate degree, or 6+ years with a high school diploma. Provides Tier 2 support and coordinates asset management, change reviews, monitoring improvements, metrics, and procedures.

Level III – Ideally, 4+ years of cyber or information security experience with a bachelor's degree, or 8+ years of equivalent experience. Leads and mentors analysts and applies advanced OT security, SIEM/IDS/IPS, vulnerability, threat-intelligence, scripting, and SOC experience.

Level IV – Ideally, 6+ years of cyber or information security experience with a bachelor's degree, or 10+ years of equivalent experience. Serves as a subject-matter expert and technical leader across OT security architecture, monitoring, incident response, vulnerability management, threat intelligence, scripting, and SOC operations.

Preferred Qualifications

Operational Technology & Security Operations