-
Participate in an 24/7 On-Call rotation that directly supports operational control and visibility of the Bulk Electric System.
-
Ensure NERC/CIP compliance and support security and operational objectives.
-
Configure, update, and maintain various network devices including switches, firewalls, IDS, and associated systems.
-
Support ongoing development projects and ensure security is integrated.
-
Troubleshoot and resolve network security issues efficiently.
-
Analyze network logs and events to address security incidents proactively and reactively.
-
Coordination between various teams in support of the Bulk Electric System.
-
Convey complex technical concepts to both technical and non-technical individuals and teams.
Architecture, Assessment & Continuous Improvement
-
Participate in the design and validation of cybersecurity architectures that span both IT and OT environments ensuring practical, fit-for-purpose solutions.
-
Plan, coordinate, and execute OT cybersecurity assessments in collaboration with internal teams, third parties, and site engineers.
-
Conduct tabletop exercises, incident simulations, and post-event reviews to validate operational readiness and continuous improvement.
-
Support incident response, including root cause analysis, containment, and corrective actions.
What You Have
Minimum Requirement
-
Bachelor's degree in IT, Computer Science, Cybersecurity, Industrial Automation, related field, or experience.
-
7+ years of combined IT/OT experience, including 2+ years in industrial cybersecurity or compliance-driven environments (e.g., SCADA, PLCs, DCS, plant operations).
-
Strong understanding of NERC CIP compliance, and industrial cybersecurity frameworks (NIST SP 800-82, IEC 62443).
-
Hands-on experience with OT infrastructure and cybersecurity controls including:
-
Servers (Windows/Linux), virtualization (VMware/Proxmox), and backup (Commvault/Veeam).
-
Network segmentation, firewalls (Fortinet, Palo Alto,), and industrial DMZ design.
-
Endpoint protection/EDR platforms (CrowdStrike, Microsoft Defender).
-
Asset inventory and monitoring tools (Industrial Defender, Nozomi, Claroty, Dragos).
-
Familiarity with identity and access management (Active Directory, Okta, Azure AD), vulnerability scanning and service management (ServiceNow).
-
Experience with physical security systems (e.g., CCURE, camera systems, sensors) and supporting compliance documentation.
-
Strong analytical, documentation, and communication skills; able to translate technical risks into business terms.
Preferred Qualifications
-
Professional certifications such as CISSP, CISM, GCIP, GICSP, or equivalent.
-
Experience supporting or leading NERC CIP audit or evidence collection processes.
-
Hands On experience Firewall Rule analysis, Network, Hosting
-
Practical knowledge of risk assessment, incident response, and continuous monitoring in OT networks.
-
Background in the utilities, energy, or manufacturing industries.
Skills & Attributes
-
Strong sense of ownership and accountability drives initiatives from concept to closure.
-
Collaborative communicator who can align IT, OT, and business functions toward shared goals.
-
Applies common sense and sound judgment when navigating complex or ambiguous situations.
-
Comfortably operating in imperfect environments with legacy systems and resource constraints.
-
Balances security imperatives with operational continuity and practical execution.
Working Conditions
-
Hybrid work arrangement (2-3 days onsite in Allentown).
-
Travel to generation sites, and control rooms as required (up to 20%).
-
Participation in on-call rotations or incident response activities as needed.
Talen Energy Corporation
Pennsylvania United States
www.talenenergy.com
