Staff Product Security Engineer

I00M05 Wipro GE Healthcare Private Limited; Bengaluru; Vor Ort; INR 4.000.000 - 8.000.000; Vollzeit

Zusammenfassung

GE HealthCare in Bengaluru seeks a Staff Product Security Engineer to lead cyber security across AIS Digital products. You will drive security by design, threat modeling, and coordinating with product and global teams to define our security strategy for healthcare software and device ecosystems.

The role requires 10+ years in security and development, expertise in cloud, device, network, and OS security, experience with AWS/Kubernetes, VAPT, and secure SDLC, plus strong collaboration and

Qualifikationen

• Bachelor’s degree in engineering.
• 10+ years in development and security across app, device, network, OS, and cloud security.
• Experience with Rest APIs, Kubernetes, and container security assessments.
• Proficient in security reviews, threat modelling, and secure SDLC.
• Knowledge of AWS security and cryptography basics.
• Ability to coordinate security assessments with global teams.
• Penetration testing methodologies and tools familiarity.

Aufgaben

• Assess security for software/product architecture and guide design teams.
• Own development of cyber security artifacts including threat models.
• Assist engineering in triaging and fixing product vulnerabilities.
• Coordinate security and privacy assessments including VAPT.
• Support business units in implementing product security policies and procedures.
• Review security plans for compliance and risk mitigation.
• Provide security risk management guidance and strategic advice.
• Assist with security incidents and assess breach impact.
• Review services and feature requests for security implications.

Kenntnisse

Cyber security

Cloud security

Leadership

Threat modelling

Security architecture

Security reviews

Interpersonal skills

Ausbildung

Bachelor’s degree in engineering

Tools

Kubernetes

AWS Security

Static & Dynamic Analysis

Penetration testing tools

PKI/CA

OAuth/2FA

Jobbeschreibung

Job Description Summary

As a Staff Product Security Engineer, you will be part of the AIS Digital team with the vision of building and sustaining product competencies and customer orientation to provide timely patient care. We are looking for a person with strong technical acumen in Cyber security in the cloud and preferably a person who has knowledge / expertise in device security and traditional hospital on-premises architectures. He/she will provide Leadership on Cyber security by working both with the product teams and the Global teams and helps to draw out the strategy for AIS Digital products. GE Healthcare is a leading global medical technology and digital solutions innovator. Our mission is to improve lives in the moments that matter. Unlock your ambition, turn ideas into world-changing realities, and join an organization where every voice makes a difference, and every difference builds a healthier world.

Job Description Key Responsibilities

• Assess the security for software/Product architecture - guide the product architects to ensure security is built into at the design level itself.
• Own development of cyber security artifacts including threat model and lead discussion on identifying mitigations.
• Assist the Engineering teams in triaging and identification of fix for detected product vulnerabilities.
• Interact with internal / external team to co-ordinate security and privacy assessments which includes VAPT to determine compliance and security posture.
• Assist business units in the development and implementation of product security and Privacy practices including policies, standards, guidelines, and procedures.
• Verify that security and privacy requirements defined in the security plans, policies, and procedures are followed and protection measures are functioning as intended.
• Guide the business unit in their management of the resolution of security audit or review findings.
• Provide security risk management and security advice as well as advice on strategic direction relating to product and information security.
• Assist with security incidents and review risk and impact of breaches to protected systems.
• Review proposed services, engineering changes, and feature requests for security implications and needed security controls.

Qualifications/Requirements

• Bachelor’s degree in engineering
• Should have 10+ years of development and security experience which includes application security, device security, network security, OS security and Cloud Security.
• Experience in Rest Api, Kubernetes and container security assessments.
• Product/Information security experience in all phases of service/product development and deployment including architecture, design, development, testing and deployment.
• Good understanding of AWS services, specifically related to security.
• Experience in designing security solutions.
• Hands-on experience in execution and review of Static & Dynamic Code Analysis reports and ability to discuss with development teams for true positives.
• Experience and knowledge of penetration testing methodologies and tools.
• Conducting information security analyses, audits, and reviews
• Willingness to learn new technologies and work on security for varied products.
• Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders
• Sound security engineering knowledge (technical) so as to work collaboratively with the Tech Leads and software/products architects to ensure secure products.
• Knowledge of information system architecture and security controls (e.g., firewall, specialized appliances)
• Sound understanding of Cryptography, various Encryption Algorithms, Public key Infrastructure (PKI) and Certificate Authority (CA), OAUTH authentication, 2FA

Desired Characteristics

• AWS Solution Architect – Associate along with AWS Security Specialty certification.
• Experience of Information security assessment in healthcare sector.
• Experience with NIST 800-53, CIS/STIG benchmark audit.
• Ideal candidate would have worked on the software development initially and then graduated in to either -S/W Lead/security assessments ensuring security in the product design.
• Exposure to privacy requirements
• Understanding of HI-TRUST and SOC2.
• Excellent Cyber Security capabilities
• Strong knowledge of secure software development lifecycle and practices such as threat modelling, security reviews, penetration tests, and security incident response
• Understanding of security by design principles and architecture level security concepts
• Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Ability to relate cyber security incidents from cross-industries.
• Good to have security certifications like OSCP/CCSP/CISSP

Inclusion and Diversity

GE Healthcare is an Equal Opportunity Employer where inclusion matters. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law. We expect all employees to live and breathe our behaviors: to act with humility and build trust; lead with transparency; deliver with focus, and drive ownership – always with unyielding integrity.

Disclaimer

GE HealthCare will never ask for payment to process documents, refer you to a third party to process applications or visas, or ask you to pay costs. Never send money to anyone suggesting they can provide employment with GE HealthCare. If you suspect you have received a fraudulent call , please fill out the form below: https://www.ge.com/careers/fraud. #LI-MP2

Additional Information

Relocation Assistance Provided: No At GE HealthCare, we see possibilities through innovation. We’re partnering with our customers to fulfill healthcare’s greatest potential through groundbreaking medical technology, intelligent devices, and care solutions. Better tools enabling better patient care. Together, we are not only building a healthier future but living our purpose to create a world where healthcare has no limits.