Cybersecurity Analyst III - V

Job Description

Job Description

Cybersecurity Analyst III-V

Protect the Systems That Power Georgia's Electric Grid

Georgia System Operations Corporation (GSOC) is seeking a Cybersecurity Analyst to help protect the technology, data, and digital infrastructure that support GSOC, Georgia Transmission Corporation (GTC), and Oglethorpe Power Corporation (OPC).

This role sits at the intersection of cybersecurity operations, cloud security, incident response, and regulatory compliance, helping ensure that critical business and operational systems remain secure, resilient, and available.

You will play a key role in safeguarding enterprise and operational technology environments through endpoint protection, cloud security, cybersecurity tools management, data protection practices, and incident response activities.

This opportunity is ideal for a cybersecurity professional who enjoys investigating threats, implementing security solutions, protecting sensitive data, and continuously improving organizational security posture in a mission-critical environment.

Candidates with deeper experience, advanced technical expertise, and demonstrated leadership capabilities may be considered for higher-level classifications (Analyst IV or V).

What You'll Do

As a Cybersecurity Analyst, you will play a key role in maintaining and enhancing the Corporation's cybersecurity posture through proactive threat management, cloud security, data protection initiatives, and continuous security improvement.

You will:

• Manage and optimize endpoint security technologies, including Endpoint Detection and Response (EDR), antivirus, and data loss prevention solutions.
• Monitor, investigate, and respond to cybersecurity threats affecting endpoints, systems, and infrastructure.
• Design, implement, and maintain security controls for cloud environments, with an emphasis on Microsoft 365 and Microsoft Azure.
• Monitor cloud environments for threats, vulnerabilities, and misconfigurations while maintaining secure access controls and security baselines.
• Develop and implement data protection strategies, including encryption, secure storage, data handling, and access control measures.
• Establish and maintain data classification standards to ensure sensitive information is appropriately protected and managed.
• Monitor emerging cyber threats through threat intelligence platforms and industry resources.
• Investigate security incidents, perform root-cause analysis, evaluate attack vectors, and document findings.
• Collaborate with internal teams to implement mitigation strategies, corrective actions, and strengthened security controls.
• Deploy, configure, maintain, and optimize cybersecurity tools and technologies, including SIEM, IDS/IPS, vulnerability management, and monitoring platforms.
• Support cybersecurity assessments, audits, compliance initiatives, and regulatory requirements.
• Develop, maintain, and improve cybersecurity architectures, standards, policies, and procedures.
• Promote a culture of security, compliance, accountability, and continuous improvement across the organization.

At advanced levels, this role may also:

• Lead cybersecurity projects focused on cloud security, threat detection, incident response, and enterprise security architecture.
• Provide technical leadership and guidance for complex cybersecurity initiatives.
• Develop strategic improvements to cybersecurity programs, technologies, and operational processes.
• Serve as a subject matter expert for cloud security, threat management, incident response, and regulatory compliance.
• Mentor cybersecurity professionals and contribute to knowledge sharing across the IT organization.
• Lead enterprise-level investigations, threat intelligence initiatives, and security modernization efforts.

What You Bring

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Systems, Engineering, or another related field of study from an accredited college or university. A combination of experience and/or education may be considered.
• Strong analytical, troubleshooting, and problem-solving skills with strong attention to detail.
• Ability to investigate and respond to cybersecurity incidents in a structured and effective manner.
• Excellent written and verbal communication skills.
• Strong customer service mindset and collaborative approach to solving security challenges.
• Ability to work independently while collaborating effectively with cross-functional teams.
• Commitment to continuous learning and staying current with evolving cybersecurity threats and technologies.

Preferred Qualifications

Endpoint & Security Operations

• Experience managing endpoint security technologies, including EDR, antivirus, and data loss prevention solutions.
• Experience monitoring, investigating, and responding to cybersecurity threats and security events.
• Experience supporting vulnerability management, threat detection, and security monitoring initiatives.

Cloud Security

• Experience securing cloud platforms, particularly Microsoft Azure and Microsoft 365.
• Experience implementing secure cloud configurations, identity management controls, and cloud governance practices.
• Knowledge of cloud-native security tools, monitoring capabilities, and access management frameworks.

Threat Intelligence & Incident Response

• Experience utilizing threat intelligence platforms and security monitoring technologies.
• Experience performing incident response, forensic investigation, and root-cause analysis activities.
• Knowledge of attack vectors, threat actor techniques, and proactive cyber defense strategies.

Data Protection & Security Architecture

• Experience implementing encryption technologies, secure storage solutions, and access control mechanisms.
• Experience developing data classification frameworks and data protection standards.
• Experience developing or supporting cybersecurity architectures, policies, standards, and governance programs.

Security Technologies

• Experience with Security Information and Event Management (SIEM) platforms.
• Experience with Intrusion Detection and Prevention Systems (IDS/IPS).
• Experience with vulnerability management platforms.
• Experience with threat intelligence platforms.
• Experience with security monitoring and observability tools.

Frameworks & Compliance

• Knowledge of cybersecurity frameworks such as NIST Cybersecurity Framework (NIST CSF) and ISO 27001.
• Experience supporting compliance requirements, including NERC CIP, SOX, FERC, and other regulated or critical infrastructure environments.
• Ability to support compliance with applicable laws, regulations, industry standards, corporate policies, guidelines, and procedures, including RUS, OSHA, SOX, NERC, FERC, and ITS requirements.

Leveling Overview

• Cybersecurity Analyst III - Experienced cybersecurity professional with a minimum of four years of cybersecurity-related experience; independently manages endpoint and cloud security systems, supports data protection initiatives, investigates security incidents, and contributes to threat intelligence and cybersecurity policy development.
• Cybersecurity Analyst IV - Advanced cybersecurity professional with a minimum of six years of experience; leads implementation of cybersecurity technologies and cloud security solutions, investigates complex incidents, develops security standards, and provides technical expertise across the IT organization.
• Cybersecurity Analyst V - Subject matter expert with a minimum of eight years of experience; leads enterprise cybersecurity initiatives, security architecture efforts, incident response programs, compliance strategies, and long-term cybersecurity modernization initiatives.

Certifications

• Industry-recognized cybersecurity certifications are highly valued, including:
• Certified Information Systems Security Professional (CISSP).
• CompTIA Security+.
• Microsoft Certified: Azure Security Engineer Associate.
• Microsoft Certified: Cybersecurity Architect Expert.
• GIAC Certified Incident Handler (GCIH).
• GIAC Security Essentials Certification (GSEC).
• Certified Ethical Hacker (CEH).
• ITIL Foundation.

Advantages of Working at GSOC

Working at GSOC means more than just a job--it's an opportunity to contribute to work that truly matters.

• Mission-Driven Impact

Your work directly supports the systems, information, and infrastructure that enable the reliable operation of Georgia's electric power system.

• Cybersecurity & Critical Infrastructure

Help defend critical infrastructure against evolving cyber threats while supporting secure, resilient, and reliable operations.

• Strong Values and Professional Standards

Work in an environment grounded in accountability, collaboration, integrity, and continuous improvement where cybersecurity, compliance, and operational excellence are core priorities.

Work Environment & Benefits

GSOC offers a professional, collaborative work environment with competitive compensation, comprehensive benefits, and a commitment to creating a respectful and inclusive workplace.