GE Vernova
Senior Network and Cybersecurity Engineer
Stafford
Posted about 23 hours ago
How your CV stacks up
1Upload CV
2Analyse CV
3Improve CV
Upload your CV to see how well it fits this job role
?%
Job Description Summary
As a Senior Network & Cybersecurity Engineer, you will be part of a team that defines the substation LAN Networks and ensures Cybersecurity compliance for the HVDC Substation Automation Systems. You will be working on several large global projects involving several stakeholders and knowledge of various cybersecurity standards is essential. This role is responsible to lead the requirement, design, implementation, and development of digital control system of the HVDC Control & Protection system.
Job Description
- Overall Design: Responsible for overall design of secure networks and Communication Architectures of the HVDC Control System from concept to commissioning based on the principles set out in IEC 62443-3-3.
- Point of Contact: Act as the point of contact for all matters related to cybersecurity and networking in a project environment. This includes evaluating the solutions of various 3rd party suppliers which interface to the control system.
- Tendering Support: Support Tendering teams during the bidding process for any cybersecurity and networking related requirements from various customers. Knowledge of a range of Cybersecurity regulations such as EU NIS, NERC and BDES is essential.
- Secure Deployment: Ensures the Secure Deployment Guides for the HVDC Control System and 3rd party system interfaces are adhered to.
- Security Assurance: Ensures the Security Assurance Plans are followed by all relevant project stakeholders during the complete project duration.
- IP Address Strategy: Define IP address strategies for the complete control system.
- Hardening: Able to perform hardening in a substation environment.
- Engineering Information: Share engineering information and promote open dialogue.
- Documentation: Ensure documentation of technical data generated for the assigned projects and/or tasks is in line with engineering policies and procedures.
- Requirement Mapping: Being able to map requirements between different cybersecurity standards.
- Analysis and Evaluation: Being able to analyze and evaluate different cybersecurity and networking solutions.
- Justification: Being able to justify solution/analysis/evaluation in front of a customer and technical audience.
- Infrastructure Building: Being able to build functional infrastructure from the ground up (Networking, virtualization, and server operating system configuration).
- Vulnerability Monitoring: Knowledge of the process for monitoring vulnerability publications.
- Patch Management: To be familiar with the patch management process to correct vulnerabilities published.
- Confidentiality Documentation: Knowledge of documentation to be provided with the associated level of confidentiality.
- Project Management: Lead the design, configuration and testing required to deliver on time and within defined budgets.
- Design Practices: Follow the department’s standard design practices, engineering reviews and guidelines.
- Testing Oversight: Oversee the testing and FAT witnessing of the Control System.
- Site Assistance: Assist site activities relevant to the installation and commissioning of the control system LAN network.
- Leadership: Lead Network & Cybersecurity Engineer requirements.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Qualifications
- Education: Qualification in Communication engineering or related field.
- Standards Knowledge: Knowledge of IEC 62443 standard, mainly parts 4-1, 4-2, 3-3 and 2-4.
- Secure Access: Familiarity with secure remote access architectures using VPN and PKI technologies.
- Virtualization: Knowledge of virtualization platforms such as VMware, HyperV and Proxmox.
- Server Configuration: Knowledge of configuring server operating systems, i.e. Windows Server.
- Firewalls: Knowledge of configuring next generation firewalls such as Fortinet.
- Intrusion Detection: Knowledge of Intrusion Detection Systems such as Nozomi, Radiflow.
- Security Tools: Knowledge of anti-malware, patch management and disaster recovery tools.
- Network Management: Knowledge of network monitoring and management.
- Cyber Topics: Knowledge of standard cyber topics such as VPN technologies, Secure Network Access, Endpoint Security, and Network Infrastructure Protection.
- Control Systems: Strong background in Distributed Control Systems / Substation Automation.
- LAN Design: Strong background in designing and configuring Substation LAN’s especially within an IEC61850 environment.
- Security Best Practices: Knowledge of Network Security / Hardening and Cybersecurity best practices.
- Protocols: Excellent knowledge of commonly used protocols such as OSPF, VRRP, LACP, SNMP, SSH, SFTP.
- Industrial Protocols: Knowledge of industrial protocols (IEC 61850, IEC 101 / 104, PTP, OPC UA, DNP3, Modbus TCP/IP) and methods to diagnose / debug using Wireshark.
- Additional Experience: Experience with one of GE Reason, Westermo, Meinberg products is advantageous.
- Site Support: Support Site testing/customers which includes site visit to fix the issues.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Required Qualifications
- Degree: Degree in Electronics/Electrical engineering or related field.
- Networking & Cybersecurity: Strong background in Networking & Cybersecurity fields
- Experience: Extensive years of experience in control and protection system design
- Industrial Networks: Knowledge of industrial communication networks such as IEC61850 and Ethernet based protocols.
- Relay Logic: Control & Protection Relay logics Design techniques
- Security Best Practices: Knowledge of communication networks Security/Hardening and Cybersecurity best practices
- Protocols: Excellent knowledge of commonly used Layer2&3 protocols such as Ipv4, OSPF, LACP, DMZ, VPN/ DMS/ADMS/ DNP, IEC, Modbus
- Relevant Experience: Experience relevant to electrical power systems and Substation automation engineering.
Desired Characteristics
- Communication Skills: Strong oral and written communication skills.
- Interpersonal Skills: Strong interpersonal and leadership skills.
- Problem Solving: Demonstrated ability to analyze and resolve problems.
- Project Leadership: Demonstrated ability to lead programs / projects.
- Planning and Execution: Ability to document, plan, market, and execute programs.
- Project Management: Established project management skills.
- Technical Leadership: Proven technical leadership in a complex system engineering development environment.
- Cross Functional Teams: Proactively serves on cross functional leadership teams; Makes decisions independently; Pulls in experts when needed.
- Track Record: Demonstrates track record of designing quality systems/components that exceed design reqs, beat cost targets, and exceed reliability targets.
Additional Information
- Relocation Assistance: Relocation Assistance Provided: No
Trusted by 25,000+ job seekers
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Cybersecurity
Network Engineering
IEC 62443
Substation Automation
HVDC Control Systems
IEC 61850
Firewall Configuration
Virtualization
Network Monitoring
Vulnerability Management
Layer 2/3 Protocols
Industrial Protocols
System Hardening
Project Leadership
Technical Documentation
Communication Engineering