Engineer I through Engineer Lead - Digital Grid Managment / Security Operations Center

Salary Range:  $80,379 - $134,665
Relocation:  No

About Us

Oncor Electric Delivery Company LLC, headquartered in Dallas, is a regulated electricity transmission and distribution business that uses superior asset management skills to provide reliable electricity delivery to consumers. Oncor (together with its subsidiaries) operates the largest transmission and distribution system in Texas, delivering power to nearly 4 million homes and businesses and operating more than 144,000 miles of transmission and distribution lines in Texas.

Summary

Responsible for ensuring the safety of technology platforms including workstations, server systems, networks, applications, databases, electronic information, and protecting systems from security violations, access, or destruction. Assists with the implementation of Information Technology security policies covering protocols, applications, networks, client and server systems, personnel, and other risk‑management mechanisms.

We are considering applicants with multiple experience levels. Please review all details related to responsibilities, education, and experience requirements for each level. These roles will be required to report to the office 5 days a week based out of Downtown Dallas. 

Engineer Level I–II 

Key Roles & Responsibilities

Engineer I

• Supports and acts as a subject matter expert for existing security technologies by administering, integrating, maintaining, and troubleshooting systems to ensure a strong security posture.
• Supports onboarding of new security technologies by working with project and vendor teams to ensure production system readiness from both operational and technical perspectives.
• Identifies information gaps that may reveal potential short‑ and long‑term threats and recommends security enhancements to management or senior Technology staff.
• Implements developed use cases to improve overall Security Operations Center (SOC) threat detection capabilities.
• Produces and reviews reports and presentations for management, including security recommendations on technology security vulnerabilities, existing controls, and future direction.
• Provides incident management support and ensures incidents are minimized through design, tools, and processes.
• Serves as an escalation point for security analysts and assists in problem‑solving by providing cybersecurity expertise and knowledge of the corporate technology environment.
• Establishes and maintains relationships with various Oncor workgroups, as well as internal and external stakeholders, for risk and issue management.
• Ensures leadership is informed of technical and regulatory changes in the security landscape.
• Acts as a change agent to drive and adapt to organizational changes.
• Demonstrates strong interpersonal skills, a positive attitude, and the ability to thrive in a fast‑paced environment.
• Self‑motivated and results‑oriented with a passion for delivering above‑average performance in a proactive manner.
• Performs all essential job functions and any other specific job requirements as assigned.

Engineer II (In addition to Engineer I responsibilities)

• Implements and manages security infrastructure to ensure secure deployment and operation of applications both within and outside of the SOC.
• Integrates diverse technologies across multiple environments to provide monitoring, alerting, and reporting.
• Develops use cases for existing and future security technologies to enhance SOC detection capabilities.
• Develops and maintains security‑related documentation, including procedures, guidelines, and best‑practice posture.
• Assesses and enhances system security, identifying and mitigating risks.
• Supports existing security technologies by working with SOC and vendor teams to ensure production systems are operational from a technical perspective.
• Responsible for onboarding new security technologies by working with project and vendor teams to ensure production system readiness.
• Develops and improves automation for repetitive SOC tasks.
• Supports cybersecurity investigations Cyber Security Incident Response Plan (CSIRP) and provides recommendations to management.
• Performs technical reviews of documentation to ensure computer security integration and compliance with regulations, including North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Sarbanes‑Oxley Act (SOX), and International Organization for Standardization (ISO) standards.

Skills

• Ability to obtain or complete certifications in industry‑specific and technical fields, such as North American Electric Reliability Corporation Critical Infrastructure Protection (NERC CIP), Computing Technology Industry Association (CompTIA) Security+, International Information System Security Certification Consortium ((ISC)²) Certified Information Systems Security Professional (CISSP), or Certified Ethical Hacker (CEH).
• Technical understanding of network concepts, protocols, services, and operating systems.
• Proven analytical, problem‑solving, and research skills with the ability to defend analysis.
• Advanced verbal and written communication skills.
• Ability to work in an open and collaborative environment.
• Strong technical understanding of:
• • Network concepts, protocols, services, and operating systems
  • Security Information and Event Management (SIEM) systems
  • Email security systems
  • Intrusion Prevention Systems (IPS)
  • Web security systems
  • Application control systems
  • Endpoint Detection and Response (EDR) systems
  • Security Orchestration, Automation, and Response (SOAR) systems
  • Anomaly detection systems
  • Windows Server and Red Hat Linux environments
  • Python, Regular Expressions (RegEx), and Structured Query Language (SQL)
  • Amazon Web Services (AWS) cloud security
  • Microsoft Azure cloud security
  • Containerization technologies (e.g., Docker, Kubernetes) and orchestration tools
  • Vulnerabilities and exploitation methods used by attackers

Education and Experience

• High School diploma, GED, or equivalent is required.
• Bachelor’s degree in Engineering, Information Technology, Computer Science, Cybersecurity, or another related field is encouraged to apply.

Engineer I

• 2+ years of cybersecurity or information technology experience is required.
• 2+ years of experience in cybersecurity monitoring using security tools is encouraged to apply.

Engineer II

• 3–4+ years of cybersecurity or information technology experience is required.
• 2+ years of cybersecurity systems support experience is required.
• 2+ years of cybersecurity monitoring experience using security tools is encouraged to apply.

Measures of Success

• Actively maintains and troubleshoots existing SOC systems.
• Demonstrates collaboration and cooperation with SOC team members and internal partners in a professional manner.
• Develops and maintains skillsets to stay current with existing and emerging technologies.
• Demonstrates strong prioritization, multitasking abilities, and adaptability in a fast‑paced environment.
• Demonstrates understanding of Technology priorities and broader organizational goals.
• Continuously maintains assigned Technology function roadmaps and improves processes and methodologies.
• Engineer Level II demonstrates aptitude for administering, maintaining, and integrating SOC systems.

Engineer Lead

Key Roles & Responsibilities

• Provides direct oversight of the following directives within the Digital Grid Management Security team:
• • Change Management: Oversees planning and scheduling of operational and project activities to ensure timely delivery.
  • Use Case Development: Develops and implements use cases into existing and future security technologies to enhance SOC detection capabilities.
  • Automation Development: Designs, implements, and maintains automated security processes for continuous monitoring, threat detection, and incident response.
• Supports development of SOC Engineering staff into subject matter experts by educating them in administering, integrating, maintaining, and troubleshooting systems.
• Identifies information gaps that may expose potential short‑ and long‑term threats and recommends enhancements to management or senior IT staff.
• Reviews and updates a detailed product roadmap of current and future SOC technologies.
• Reviews and finalizes weekly, monthly, quarterly, and annual reports and presentations for management, including security recommendations and technology vulnerability assessments.
• Supports cybersecurity investigations Cyber Security Incident Response Plan (CSIRP) and provides recommendations.
• Provides incident management support and ensures incidents are minimized through design, tools, and processes.
• Evaluates and recommends new security technologies that enhance SOC capabilities.
• Establishes and maintains relationships with various Oncor workgroups and internal and external stakeholders for risk and issue management.
• Ensures leadership is apprised of technical and regulatory changes in the security landscape.
• Serves as a “360‑degree thinking” tollgate to ensure One Technology orchestration and alignment prior to rollout of significant technology changes.
• Effectively communicates and navigates disruptions that may arise with technology delivery, protection, and operations.
• Oversees assigned SOC operations and guides transformation, change, and continuous improvement efforts to support business outcomes.
• Continuously develops training and progression plans for SOC Engineering staff.
• Performs all essential aspects and functions of the job as well as any other specific job requirements as assigned.

Skills

• Completion of certifications in industry‑specific and technical fields, such as CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Cisco Certified Network Associate (CCNA).
• Strong technical understanding of vulnerabilities and how attackers exploit them.
• Proven analytical, problem‑solving, and research skills with the ability to defend analysis.
• Advanced written and verbal communication skills.
• Ability to work in an open and collaborative environment.
• Strong technical understanding of:
• • Network concepts, protocols, services, and operating systems
  • Security Information and Event Management (SIEM) systems
  • Email security systems
  • Intrusion Prevention Systems (IPS)
  • Web security systems
  • Application control systems
  • Endpoint Detection and Response (EDR) systems
  • Security Orchestration, Automation, and Response (SOAR) systems
  • Anomaly detection systems
  • Windows Server and Red Hat Linux environments
  • Python, Regular Expressions (RegEx), and Structured Query Language (SQL)
  • Amazon Web Services (AWS) and Microsoft Azure cloud security
  • Docker, Kubernetes, and orchestration tools
  • Vulnerabilities and exploitation techniques

Education and Experience

• High School diploma, GED, or equivalent is required.
• Bachelor’s degree in Engineering, Information Technology, Computer Science, Cybersecurity, or another related field is encouraged to apply.
• 5–7+ years of cybersecurity or information technology experience is required.
• 4+ years of cybersecurity systems support experience is required.
• 2+ years of cybersecurity monitoring experience is required.

Measures of Success

• Ensures coordinated planning and scheduling of operational and project activities in a timely manner.
• Ensures SOC product roadmaps are up‑to‑date and current.
• Establishes and implements defined training programs for SOC Engineers to develop skillsets.
• Demonstrates strong prioritization, multitasking abilities, and adaptability in a fast‑paced environment.
• Demonstrates ability to collaborate with internal partners in a professional manner.
• Demonstrates understanding of Technology priorities and broader organizational goals.
• Continuously maintains assigned Technology function roadmaps and improves processes and methodologies.

Note for All Positions

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel. These roles include possible 24×7 on‑call or off‑hour security support, including weekends and holidays.

Benefits

At Oncor, we offer a comprehensive set of benefits, compensation and performance management programs designed specifically to attract, retain, motivate and reward our high-performing workforce. Our supportive and inclusive culture allows every team member the opportunity to thrive and make a difference. We invest in our employee’s success and well-being by offering such things as: 

• Annual incentive program.
• Competitive health and welfare benefits (medical, dental, vision, life insurance)
• Ability to earn wellness incentives (up to $2,300 in 2026 as an Employee only) and other wellbeing resources.
• 401k with dollar-for-dollar company match up to 6%.
• 401k match with student debt program.
• Cash balance pension plan.
• Adoption Assistance.
• Mental health resources.
• Employee resource groups.
• Tuition reimbursement.
• Competitive vacation, 10 company holidays and 2 personal holidays.
• Paid parental leave.
• Salary continuation for up to 6 months for approved employee illness or injury.
• Other perks such as commuter benefits, electric vehicle incentive program, appliance purchase plan.

Participation in benefit programs for employees in collective bargaining units is subject to the applicable collective bargaining agreement.