Manager, Specialized Cybersecurity Engineering

Manager, Specialized Cybersecurity

Job Description

Location: The Energy Center (Birmingham, AL) or Georgia Power HQ (Atlanta, GA)

Hybrid: 4 days onsite - 1 day remote

Position Summary

Southern Company is seeking a cybersecurity leader to direct a team focused on leading security engineering services for the Specialized Cybersecurity team. These responsibilities include but are not limited to overseeing network security services, security technology lifecycle engineering and security solutions architecture for critical operational environments in both Electric and Gas. This manager's role reports to the Specialized Cybersecurity Senior Manager and needs to be comfortable engaging with executive leadership and business-unit aligned security stakeholders.

The ideal candidate will have a strong background in cybersecurity, with experience in security architecture, engineering and hands-on experience in operational technology environments.

This position directly supports Southern Company''s mission to mitigate cyber risk across critical electric and gas utility infrastructure and operational technology environments. Success requires strong people leadership, strategic judgment, executive communication, cross-functional influence, and the ability to operate in a highly regulated, mission-critical environment.

Job Responsibilities

• Lead security engineering services team and deliver security solutions that mitigate potential security risks.

• Design and oversee the implementation of advanced security policies and strategies tailored to the unique needs of operational environments.

• Foster the integration of OT and IT security practices to create a robust security architecture that is resilient against cyberattacks.

• Champion training and development programs to elevate security culture and best practices across client organizations.

• Engage with business partners at a strategic level, delivering exceptional service and identifying new avenues for SCS2 to provide value.

• Keep a pulse on industry trends and leverage this knowledge to drive innovation within the SCS2 cybersecurity program.

• Exemplify a leadership approach focused on building, inspiring and developing outstanding teams

• Use frameworks such as the Cyber Kill Chain, Diamond Model for intrusion analysis and MITRE ICS ATT&CK to identify and analyze threats and their effectiveness against our cyber defenses

• Champion the effort to increase detection and log coverage across all operational environments

• Develop metrics for ongoing performance measurement and reporting, and provide regular status to key stakeholders

• Apply strong leadership and strategic thinking to a diverse set of opportunities and challenges

• Hire, develop, reward and retain a highly qualified and diverse team

• Create an environment that fosters accountability, innovation and engagement at all levels

• Establish an annual budget and meet expense and capital spend targets

• Act as a student of business and technology, anticipating future needs and shifts in technology and energy industries.

• Appreciate and leverage the valuable inputs that come from diverse backgrounds and individual differences

Requirements and Qualifications

Minimum Qualifications

• Bachelor''s degree in cybersecurity, computer science, information technology, engineering, business, or a related field, or relevant experience.

• At least 5 years of experience directly supporting technology solutions (servers, switches, firewalls, etc).

• At least 5 years of experience in cybersecurity, with a proven track record of leadership in this domain

• 3+ years of experience in leading teams

• Demonstrated ability to be an inclusive leader

• Strong leadership abilities, with the capability to attract and retain top talent, and motivate and develop personnel and future leaders

• Experience with applying sophisticated cyber threat actor Tactics, Techniques, Procedures (TTPs) to security operations

• Excellent communication and interpersonal skills, capable of engaging with business partners and stakeholders at all levels.

• Ability to operate effectively in a highly regulated, mission-critical environment.

• A strategic thinker with a resourceful mindset, adept at navigating complex challenges and driving team performance.

Preferred Qualifications

• Experience supporting critical infrastructure, energy, utility, operational technology, or similarly regulated environments.

• Experience developing executive cybersecurity metrics, dashboards, program reporting, and investment recommendations.

• Relevant certifications such as CISSP, CISM, or GIAC certifications.

Job Requirements

• Required to submit to a thorough background examination.

• Must pass applicable NERC CIP and Insider Threat Protection background checks.

• Ability to respond to high-priority or time-sensitive cybersecurity events outside normal business hours when necessary.

• Occasional travel to local and regional locations in pursuit of job duties and requirements.

• Ability to work independently and through teams while managing multiple priorities, schedules, and commitments.

This position falls under the company's Insider Threat Program and will have access to, and control over sensitive data, systems or assets. Enhanced personnel screening, which includes a background review, drug screen and psychological assessment, will be required if you are selected for this position

About Southern Company

Southern Company (NYSE: SO ) is a leading energy provider serving 9 million customers across the Southeast and beyond through its family of companies. Providing clean, safe, reliable and affordable energy with excellent service is our mission. The company has electric operating companies in three states, natural gas distribution companies in four states, a competitive generation company, a leading distributed energy solutions provider with national capabilities, a fiber optics network and telecommunications services. Through an industry-leading commitment to innovation, resilience and sustainability, we are taking action to meet customers'' and communities'' needs while advancing our goal of net-zero greenhouse gas emissions by 2050. Our uncompromising values ensure we put the needs of those we serve at the center of everything we do and are the key to our sustained success. We are transforming energy into economic, environmental and social progress for tomorrow. Our corporate culture has been recognized by a variety of organizations, earning the company awards and recognitions that reflect Our Values and dedication to service. To learn more, visit www.southerncompany.com .

Southern Company invests in the well-being of its employees and their families through a comprehensive total rewards strategy that includes competitive base salary, annual incentive awards for eligible employees and health, welfare and retirement benefits designed to support physical, financial, and emotional/social well-being. This position may also be eligible for additional compensation, such as an incentive program, with the amount of any bonus/awards subject to the terms and conditions of the applicable incentive plan(s). A summary of the benefits offered for this position can be found here https://seo.nlx.org/southernco/pdf/SOCO-Benefits.pdf . Additional and specific details about total compensation and benets will also be provided during the hiring process.

Southern Company is an equal opportunity employer where an applicant''s qualifications are considered without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity or expression, or any other basis prohibited by law.

Job Identification: 22395

Job Category: Cybersecurity

Job Schedule: Full time

Company: Southern Company Services