Product Security Engineer - OT Cyber, SDL & IEC 62443

GE Vernova, Inc.; Zamudio; Presencial; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation assistance

Descripción de la vacante

GE Vernova, Inc. is seeking a Product Security Lead to drive the Secure Development Lifecycle (SDL) and incident/vulnerability management for Grid Automation products. You will lead security architecture decisions, threat modelling, and secure deployment guides.

Responsibilities include developing security training, coordinating with domain experts, and ensuring compliance with NERC-CIP, NIST, IEC62443, and IEC62351. Prior OT security and telecom equipment experience are highly valued.

Formación

• Bachelor’s Degree from an accredited university in Engineering, Computer Science or Information Technology.
• Extensive experience with cyber security, preferably in an OT environment.
• Experience with Telecom and Network Equipment (Routers, Switches, Firewalls).
• Experience with security technologies such as LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG.
• Encryption, TLS, RSA and code signing.
• Experience with vulnerability assessment tools and penetration testing methodologies.

Responsabilidades

• Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide.
• Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth.
• Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap.
• Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts.
• Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation.
• Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support.
• Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable and drafting the security advisories.
• Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351.

Conocimientos

Cyber security

OT experience

Networking experience

Educación

Bachelor’s degree in Engineering/CS/IT

Herramientas

LDAP/RADIUS/SSH

TLS/Encryption/RSA

Vulnerability assessment tools

Penetration testing methods

Descripción del empleo

GE Vernova, Inc. is seeking a Product Security Lead to drive the Secure Development Lifecycle (SDL) and incident/vulnerability management for Grid Automation products. You will lead security architecture decisions, threat modelling, and secure deployment guides.

Responsibilities include developing security training, coordinating with domain experts, and ensuring compliance with NERC-CIP, NIST, IEC62443, and IEC62351. Prior OT security and telecom equipment experience are highly valued.