Cyber Security Engineer / Analyst

JOB SUMMARY:

Southern Nuclear Operating Company's Fleet Cyber Security organization is seeking a high performing Cyber Security Engineer/Analyst with an analytical mindset and strong technical and leadership skills. This position will be located at Southern Nuclear Company's Plant Vogtle in Waynesboro, Georgia. This position will provide technical leadership, execution, guidance, and monitoring of the Plant Vogtle Cyber Security Plan. The Cyber Security Engineer/Analyst will also be tasked with maintaining programmatic aspects for site digital assets while interfacing with several departments including Site Security, Operations, Emergency Preparedness, and Engineering.

JOB REQUIREMENTS: (Education, Experience, Knowledge, Skills )

Educational Requirements:

• Bachelor of Science degree in Engineering from an ABET accredited college or university or a PE (Professional Engineer) license or Computer Science, Information Technology or related technical discipline is required

• GIAC, CISM, or CISSP certifications are preferred

Job Requirements:

• Commercial nuclear power plant experience in cyber security is desired

• Knowledge and understanding commercial nuclear power plant regulations, codes, and standards is desired

• 3 years engineering experience in cyber security is desired.

• 3 years nuclear power plant related engineering experience is preferred

• Previous design change experience is desired

• 10 CFR 73.54 Assessment experience is desired

Knowledge, Skills & Abilities:

• Excellent oral and written communications skills

• Proven organizational skills with ability to balance multiple projects simultaneously

• Capable of working efficiently and effectively across organizations

• An ability to solve problems and make sound engineering decisions, based on experience and appropriate industry practices, in order to make timely decisions which might impact plant safety and reliability

• Effectively present technical positions to all levels of management and to external organizations

• Working knowledge of common computer tools, including Microsoft Office Word and Excel

• Engineering experience with Networking Equipment, Distributed Control Systems and Programmable Logic Controllers

• The ability to develop, test, implement, and upgrade software applications from simple to complex.

Behavioral Attributes:

• Accepts ownership of assigned programs, projects, and tasks

• Manages financial performance to control costs

• Works through conflicts to create win-win situations

• Holds self and others accountable for living “Our Values” at Southern Company (Safety First, Intentional Inclusion, Act with Integrity, Superior Performance)

• Strong interpersonal and client relation skills

• Values diversity and respects the dignity of every individual

• Develops strong teamwork with peers throughout the nuclear industry.

Other Requirements:

• The successful candidate must meet background screening and NRC Fitness for Duty requirements

• Must satisfactorily complete the 5 weeks Systems Engineering training program

• The successful candidate must be willing to travel to other plants within the fleet for mentoring during qualification process if required

MAJOR JOB RESPONSIBILITIES:

Responsible to manage the overall effectiveness of the Cyber Security defensive strategy at Plant Vogtle. The Cyber Security Engineer/Analyst assists Critical Digital Asset (CDA) System Owners with day-to-day oversight and management of the health, operations, development, integration, modification, and maintenance of a CDA. The Cyber Security Engineers are the primary leads for the following responsibilities:

• Assist the Cyber Security Program Manager in conducting periodic reviews of the defensive strategy.

• Analyze logs from security control devices, such as firewalls and intrusion detection devices, for possible intrusions.

• Perform configuration and administrative duties of all Boundary Isolation Device Implementations and configurations including software/hardware where applicable.

• Maintain expert skill and knowledge level in cyber security; and receive specialized cyber security training.

• Where applicable, perform cyber security assessments of CDAs; conduct cyber security audits, network scans, and penetration tests against CDAs as necessary and where technically feasible.

• Manage investigations resulting from system vulnerabilities or security breaches ensuring timely resolution, appropriate escalation and communication protocols are followed.

• Lead Site CSAT for review and approval of CDA assessments

This position provides engineering support to the cyber security program by:

• Understanding the cyber security implications surrounding the overall architecture of plant networks, operating systems, hardware platforms, plant-specific applications, and the services and protocols upon which those applications rely

• Assisting in the ongoing development of Southern Nuclear Company’s cyber security program by identifying areas of opportunity, researching alternatives, and recommending solution

• Understanding, relating, and transforming security regulatory requirements into information security policy, standards, procedures, and guidelines

• Performing weekly, monthly, and quarterly testing/monitoring for Critical Digital Assets (CDAs)

• Participating in the Cyber Security Incident Response Team (CSIRT) and associated annual drills

• Review / Oversight of cyber security screenings/assessments in accordance with regulatory basis

• Maintaining cyber security program plans (access control, audit, and accountability, etc.) for CDAs

• Support for the testing and life cycle management of cyber applications and equipment, to include updates/upgrades.

Southern Nuclear is a leader among the nation’s nuclear energy operators, running six – soon to be eight – units for Alabama Power and Georgia Power. For more than 40 years, the company has operated nuclear energy facilities at the highest levels of safety and reliability, creating carbon-free electricity for millions of homes and businesses.

SNC prioritizes the health and safety of the public and its employees above all else, operating its facilities safely, reliably and affordably for customers and communities while using innovative technologies and practices that enhance performance. This work is enabled by the continuous development, leadership and skills of a high-performing workforce.

Southern Company (NYSE: SO) is a leading energy provider serving 9 million residential and commercial customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy infrastructure company with national capabilities, a fiber optics network, and telecommunications services. Through an industry-leading commitment to innovation, resilience, and sustainability, we are taking action to meet our customers’ and communities’ needs while advancing our commitment to net zero emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture and hiring practices have earned the company national awards and recognition from numerous organizations, including Forbes, Military Times, DiversityInc, Black Enterprise, J.D. Power, Fortune, Human Rights Campaign and more. To learn more, visit www.southerncompany.com.

Southern Company is an equal opportunity employer where an applicant's qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 6112

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Nuclear

Candidate Profile

Take a few minutes to create or modify your employment profile and to specify your preferred working criteria for future openings matching your interests.

Create / access My Profile

Our Culture & Hiring Process

Learn more about Southern Company’s culture, values, and diversity initiatives and what our hiring process looks like. You are one step closer to helping us build the future of energy!