Product Security Engineer: OT Cyber, SDL & IEC 62443

GE Vernova, Inc.; Montpellier; Sur place; EUR 78 000 - 109 000; Plein temps

Avantages offerts par ce poste

Relocation assistance

Equal opportunity employer

Résumé du poste

GE Vernova is seeking a Product Security Lead to drive Secure Development Lifecycle implementation for Grid Automation products. You will oversee security assessments, threat modelling, and secure deployment guidelines while shaping the cyber security architecture with cross-functional teams.

You will lead standards, tooling, and training initiatives, advise on technology choices, and participate in vulnerability/incident processes in a global OT environment.

Qualifications

• Bachelor’s Degree from an accredited university in Engineering, Computer Science or Information Technology
• Extensive experience with cyber security, preferably in an OT environment.
• Experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
• Experience with security technologies, such as LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
• Encryption, TLS, RSA and code signing
• Experience with vulnerability assessment tools and penetration testing methodologies.

Responsabilités

• Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide.
• Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth.
• Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap.
• Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts.
• Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation.
• Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support.
• Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable and drafting the security advisories.
• Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351

Connaissances

Cyber security

OT environment experience

Networking equipment

Encryption TLS

Code signing

Vulnerability assessment

Penetration testing

Linux

Windows

English communication

Formation

Bachelor's Degree in Engineering/Computer Science/Information Technology

Outils

LDAP

RADIUS

SSH

SFTP

HTTPS

SYSLOG

TLS

RSA

Description du poste

GE Vernova is seeking a Product Security Lead to drive Secure Development Lifecycle implementation for Grid Automation products. You will oversee security assessments, threat modelling, and secure deployment guidelines while shaping the cyber security architecture with cross-functional teams.

You will lead standards, tooling, and training initiatives, advise on technology choices, and participate in vulnerability/incident processes in a global OT environment.