Cyber Security Lead Engineer

RE1055 GE Renewable Energy Technologies Private Limited; Hyderabad; On-site; INR 1,600,000 - 2,800,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

GE Renewable Energy Technologies Private Limited in Hyderabad is seeking a Cyber Security Engineer to contribute to SDL, threat modeling, and secure deployment guidance for Monitoring & Diagnostics products in Grid Automation.

The role requires a bachelor’s in engineering/CS/IT and 7+ years in cyber security design and software development, with knowledge of TCP/IP, cryptography, PKI, IEC 62443, NERC CIP. You will collaborate across software teams to ensure secure design and compliance.

Qualifications

• Bachelor’s degree in engineering, CS or IT from an accredited university.
• Minimum 7 years in cyber security design, implementation and applications.
• Minimum 4 years in software design and implementation.

Responsibilities

• Execute SDL for M&D products including security assessments and threat modeling.
• Review design and test specs for secure design and implementation requirements.
• Coordinate with M&D teams for NPI technical reviews and artifacts.
• Perform cyber security reviews for NPI that do not require design office presence.
• Create cyber security compliance documents (NERC CIP, IEEE 1686, IEC 62443).
• Document M&D roadmap aligned with IEC 62443 and standards.
• Own the cyber security roadmap execution with cross-functional teams.

Skills

Cyber security

Threat modeling

SDL knowledge

TCP/IP protocols

PKI cryptography

Secure SDLC

NERC CIP

Written & spoken comms

Education

Bachelor's Degree in Engineering, Computer Science or Information Technology

Tools

Static code analysis

Job description

Job Description Summary

Job Description Summary The Cyber Security Engineer will be a team player, contributing to the ongoing delivery of existing product solutions, and the development of new products, focused on product security in Monitoring & Diagnostics division of Grid Automation business. The task is full cycle, from the specification of new solutions, through to test and delivery. Cyber Security is an exciting growth area of the business and the individual will have the freedom to develop the business’s R&D approach, particularly in introducing improved tools and automated test processes.

Typical Project Types Substation SCADA Systems

Job Description Responsibilities

• Contribute to the execution of the Secure Development Lifecycle (SDL) for all the M&D products and projects. This includes security assessments, threat modeling, static code results analysis, security requirements, high level design and test strategy specifications, secure deployment guides.
• Participate in design and test specifications review for the M&D products, to cover the cyber security perspective (ensure secure design and implementation requirements are met).
• Coordinate with M&D software teams to ensure all relevant artifacts are ready for the NPI technical reviews.
• Perform cyber security reviews for all M&D NPI technical reviews that do not require design office representation.
• Create and maintain the cyber security compliance documents as needed (e.g. NERC CIP, IEEE 1686, IEC 62443).
• Perform M&D roadmap documentation on our products aligning with IEC 62443.
• Compliance with all relevant industry standards
• Own the cyber security roadmap execution (ensure progress in M&D through collaboration with M&D program line leaders and the GA cyber security team, as well as through assisting the software teams where needed).
• Implement the cyber security vulnerability and incident process for M&D products.

Required qualifications

• Bachelor’s Degree in Engineering, Computer Science, or Information Technology from an accredited university
• Minimum 7 years of experience in cyber security design, implementation, and applications.
• Minimum 4 years of experience in software design and implementation.
• Demonstrated knowledge and understanding of network communications protocols in the TCP/IP network stack.
• Experience with secure software development (SDL)
• Secure design and implementation requirements, techniques, and practices
• Experience with cyber security aspects, such as Symmetric and asymmetric cryptography and PKI infrastructure LDAP, RADIUS, TLS, SSH, SFTP, RSA, HTTPS Encryption and Code Signing
• Knowledge of cyber security standards and regulations, such as IEC 62443, NERC CIP, IEEE1686
• Good writing and oral communication skills

Nice to have skills

• Experience with penetration testing
• Experience with threat modeling techniques and tools
• Experience with secure testing, including tools for static code analysis, fuzzing

Additional Information

• Relocation Assistance Provided: Yes

Our Mission and Values

Addressing the climate crisis is an urgent global priority and we take our responsibility seriously. That is our singular mission at GE Vernova: continuing to electrify the world while simultaneously working to help decarbonize it. we must be different. Our mission is embedded in our name. We retain our treasured legacy, “GE,” in our name as an enduring and hard‑earned badge of quality and ingenuity. “Ver” / “verde” signal Earth’s verdant and lush ecosystems. “Nova,” from the Latin “novus,” nods to a new, innovative era of lower carbon energy that GE Vernova will help deliver. Together, we have The Energy to Change the World. www.gevernova.com