Product Security Engineer securing Grid Automation products for GE Vernova’s Grid Automation business. Applying SDL, vulnerability management, threat modeling, penetration testing and IEC 62443 standards.
About the role
- Product Security Engineer securing Grid Automation products through SDL, threat modelling, and penetration testing. Managing vulnerabilities and incidents for Grid Automation cybersecurity solutions.
Responsibilities
- Implement the secure development life cycle (SDL), including security assessment, threat modelling, requirements definition, security architecture and design, penetration testing, and secure deployment guide
- Participate in the development and delivery of competitive product cybersecurity solutions to support targeted growth
- Contribute to technology choices and design aligned with the overall Grid Automation cybersecurity strategy and roadmap
- Share best practices and lessons learned and continuously update the technical cybersecurity architecture in collaboration with product security leads, domain architects, and experts
- Recommend and participate in the design and implementation of standards, tools, and methodologies in the GEV Grid Automation research and development community
- Develop and conduct security training for internal audiences such as product managers, software engineers, and technical support
- Implement the cybersecurity vulnerability and incident process, including vulnerability assessment, solution definition, external communication where applicable, and drafting security advisories
Requirements
- Bachelor’s Degree from an accredited university in Engineering, Computer Science or Information Technology
- Extensive experience with cyber security, preferably in an Operational Technology (OT) environment
- Experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
- Experience with security technologies including LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
- Experience with encryption, TLS, RSA and code signing
- Experience with vulnerability assessment tools and penetration testing methodologies
- Knowledge of symmetric and asymmetric cryptography and PKI infrastructure
- Cyber security certification (e.g. ISC2, SANS, ISACA, CISSP)
- Experience with programming and scripting languages
- Knowledge and understanding of the TCP/IP network stack, communication protocols and applications, including Modbus, DNP3, IEC61850
- Experience with Linux, VxWorks and Windows operating systems, including user account management, security/system hardening, device control, and patch management
- Excellent customer service mindset
- Demonstrated ability to lead programs/projects, document, plan, market, and execute programs; established project management skills
- Excellent oral and written communication skills in English
- Ability to work effectively in a team and across functions in a worldwide environment
Benefits
- Discretionary annual bonus
- Relocation Assistance Provided: Yes
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Principal Security Architect securing Menlo Security’s browser and AI - agent protection platform. Leading cryptography, cloud, vulnerability, and product security architecture.
Senior Product Security Engineer building AI - driven SDLC security tooling for BeyondTrust’s identity security SaaS. Automating reviews, integrating CI/CD controls, and supporting product incident response.
BDC banking manager overseeing commercial loan security and disbursements across Western Canada. Coordinating due diligence, risk evaluation, lending partners and compliant loan funding.
Cybersecurity new graduate rotating through Intact’s 24 - month tech development program. Supporting threat detection, incident response, infrastructure security, and AI - enhanced security insights.
Red Team Security Engineer conducting cloud adversary simulations for Motive’s fleet - management platform. Assessing attack paths, validating detection coverage, and driving remediation with engineering teams.
Staff Product Security Architect securing GitLab’s DevSecOps orchestration platform. Driving architecture, threat modeling, prototypes, and systemic risk reduction across engineering.
Information Security Manager leading enterprise EUC governance technology deployment and product roadmaps at TD, a global financial institution. Driving risk controls, adoption, delivery and assurance across business segments.
Principal Cloud Security Engineer securing Pax8’s cloud marketplace, infrastructure, and AI - enabled platforms. Establishing cloud, Kubernetes, identity, and software - delivery security standards across USA and Canada.
Cyber Security Engineer auditing diverse codebases, fixing vulnerabilities, and optimizing backend software. Contributing security insights and improvements to AI training datasets for a technology company.