Product Security Engineer - Cyber security - IEC 62443
Key Skills for This Role
Full Job Posting
Essential Responsibilities
- Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing and secure deployment guide.
- Participate in the development and delivery of competitive product cyber security solutions, to support targeted growth.
- Contribute in decisions related to technology choices and design, for alignment with the overall Grid Automation cyber security strategy and roadmap.
- Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other product security leads, domain architects and experts.
- Recommend and participate in the design and implementation of standards, tools, and methodologies in the research and development community of GEV Grid Automation.
- Develop and conduct relevant security training for various internal audience, such as product managers, software engineers and technical support.
- Implement the cyber security vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable and drafting the security advisories.
- Knowledge of cyber asset protection regulations and standards affecting the utilities industry including NERC-CIP, NIST, IEC62443, IEC62351
Required Qualifications
- Bachelor’s Degree from an accredited university in Engineering, Computer Science or Information Technology
- Extensive experience with cyber security, preferably in an Operational Technology (OT) environment.
- Experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
- Experience with security technologies, such as
- LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG Encryption, TLS, RSA and code signing
- LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
- Encryption, TLS, RSA and code signing
- Experience with vulnerability assessment tools and penetration testing methodologies.
Desired Characteristics
Symmetric and asymmetric cryptography and PKI infrastructure
Cyber security certification (ex. ISC2, SANS, ISACA, CISSP)
Experience with programing and scripting languages.
Demonstrated knowledge and understanding of the TCP/IP network stack, communication protocols and applications, including Modbus, DNP3, IEC61850.
Demonstrated experience with Linux, VxWorks and Windows operating systems including user account management, security / system hardening, device control, and patch management.
Excellent customer service mind-set
Demonstrated ability to lead programs / projects. Ability to document, plan, market, and execute programs. Established project management skills.
Excellent oral and written communications skills in English
Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment
For candidates applying to a Canadian-based position, the pay range for this position is between $126,000 - $176,000 CAD. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.
Bonus eligibility: discretionary annual bonus.
This posting is for an existing vacancy.
Relocation Assistance Provided
- Yes
About GE Vernova
Global energy company providing power generation, electrification, and decarbonization solutions.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at GE Vernova
Installation Parts - Lead Sourcing Specialist
, USA
Job Description Summary When installation sites need critical parts fast, your decisions help keep projects moving. As the Installation Parts Lead Sourcing Specialist, you will lead fulfillment strategy for Installation
Senior Staff Developer -DSP
Markham, CAN
GE Vernova is seeking a Senior Staff Embedded DSP Developer to design and optimize embedded solutions for power-grid protection and control products. Candidates need a relevant bachelor's degree, at least 10 years of sof
Senior Supply Chain Project Manager
Dammam, KSA
GE Vernova seeks a Senior Supply Chain Project Manager to own end-to-end management of supply chain development projects such as transformation, expansion, transfer of work, and restructuring. The role requires a bachelo
Senior Project Engineering Manager
Dammam, KSA
Field Services Engineer
Dammam, KSA
Sr. Customer Portfolio Manager CS
Riyadh, KSA
Senior Supply Chain Project Manager
Dammam, KSA
Senior Project Engineering Manager
Dammam, KSA
Installation Parts - Lead Sourcing Specialist
, USA
Senior Staff Developer -DSP
Markham, CAN
Senior Supply Chain Project Manager
Dammam, KSA