The ICS Cybersecurity Engineer will serve within the Services Organization, focusing primarily on the design, deployment, and implementation of secure Industrial Control Systems (ICS) and IT/OT infrastructures for customer projects. The role is project-oriented, delivering cybersecurity solutions and architectures aligned with regulatory frameworks and industry best practices. While the primary responsibility is project implementation, familiarity with support and incident management is considered a strong asset.
Job Description
Architecture & Roadmap Development
Participate in domain technical and business discussions relative to future architecture direction for ICS/OT environments.
Assist in the analysis, design, and development of secure infrastructure roadmaps, ensuring alignment between current and future state architectures.
Gather and analyze data to define architectural requirements at the project level.
Coach and mentor project teams and customer stakeholders on ICS cybersecurity best practices.
Cybersecurity in Project Implementation
Integrate and configure ICS/OT security tools (firewalls, intrusion detection, asset inventory, anomaly detection) into customer environments.
Conduct vulnerability assessments, compliance checks, and security hardening activities within the scope of project delivery.
Ensure all project activities are carried out in compliance with ICS-relevant standards (ISO9001, ISO27001, IEC 62443) and company processes.
Translate business and operational requirements into secure technical solutions that strengthen cyber resilience for customer environments.
Required Qualifications
Bachelor’s Degree with a minimum of 8 years of professional experience.
Proven experience in ICS/OT cybersecurity engineering and implementation projects.
Familiarity with applying ICS security frameworks (IEC 62443, NIST CSF, NERC CIP) in projects.
System administration: Windows – core competency to install, configure, manage.
Linux administration and security expertise.
Network hardware: Cisco enterprise and industrial switches, VLAN, ACL, routing, VPN, and network segmentation for ICS environments.
Security management: Enterprise firewalls (Cisco ASA, Fortinet, Palo Alto, or equivalent) – design, configure, deploy, with emphasis on OT perimeter defense and secure remote access.
Windows / Active Directory Services – install, configure, manage.
Virtualization: VMware vSphere clusters, with experience in HA, DRS, and backup APIs.
Knowledge of anti-virus implementations (McAfee EPO, Bitdefender, Microsoft Forefront, etc.).
Experience with IPAMs and password management solutions.
Experience with monitoring, logging, and SIEM tools (Nagios, Graylog, Splunk, Claroty, Nozomi, Dragos).
Strong cybersecurity foundation with demonstrated OT project delivery experience.
Desired Qualifications
Experience in support/incident management (L1/L2/L3) for ICS/OT security tools, incident response, and vulnerability remediation.
Willingness to travel abroad for on-site project delivery (up to 50% of the time or more).
Fluent in English.
Degree or Diploma in Computer Science or equivalent knowledge or experience.
Proven track record of problem analysis, identification, and resolution.
Excellent communication skills, discipline, accountability, and flexibility in a project-driven environment.
Strong understanding of ITIL and change management policies and procedures.
Hands-on experience in technical roles within critical infrastructure or industrial environments.
Understanding of architecture standards concepts and ability to apply them to project work.
Why join our team:
GE Vernova is proud to be an equal opportunity employer, committed to the continuous improvement and the wellbeing of its employee. We are offering fully customized development and training programs all throughout the year, on top of a LinkedIn Learning subscription and full access to GE Vernova’s learning database.
Our wellbeing program will allow you to benefit from multiple events focused on a healthy lifestyle, free apps to support your healthy habits and free employee assistance program, provided by specialized counselors.
Also, we are offering:
Strong induction process (a dedicated 1-month ramp-up period).
Flexible working hours and a well-defined hybrid working policy.
Private Medical Insurance for you (can also be extended for family members).
Attractive financial compensations for roles involving external travels and on-site missions.
Fully customized development and training programs all throughout the year.
Increased number of vacation days, according to your work-experience, encompassed by an annual bonus payout.
Annual, performance-based, salary review.
Multiple subscriptions, discounts and vouchers available (such as Bookster subscription, corporate discount to fitness services, gift vouchers for Christmas and Easter holiday, daily meal vouchers, additional days off such as 8th of March and 3rd Easter Day and children’s benefits, including gifts for special occasions, vouchers, and events) etc.
Our Culture
At GE Vernova, we believe in the value of your unique identity, background, and experiences. We are committed to fostering an inclusive culture, where everyone feels empowered to do their best work because they feel accepted, respected, and that they belong. By embracing inclusive teams and perspectives, we are better equipped to build a world that works.
GE Vernova’s Global Delivery Center in Bucharest is not only a workplace, but also a community where members are actively involved in different initiatives such as personal development workshops, book clubs, sports competitions, charity events, volunteering on greening and afforestation and dedicated events for employees’ children.