Principal Product Security Incident Responder

🔥 vor 22 Stunden

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

GE Vernova

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

💼 Beratung

📦 Logistik

🏭 Fertigung

Consulting • Logistics • Manufacturing

GE Vernova ist ein führendes Unternehmen im Energiesektor mit über 130 Jahren Erfahrung und dem Ziel, die Welt zu elektrifizieren und gleichzeitig zu dekarbonisieren. Das Unternehmen bietet ein breites Portfolio an Energielösungen, darunter Gas-, Wasserkraft-, Kern- und Windkrafttechnologien, die auf die Bereitstellung verlässlicher, erschwinglicher und nachhaltiger Energie ausgerichtet sind. Mit einem starken Fokus auf Innovation leistet GE Vernova einen wichtigen Beitrag zur Reduzierung des CO2‑Fußabdrucks globaler Energiesysteme und unterstützt den Übergang zu Netto-Null-Emissionen bis 2030.

Beschreibung

• operate the GE Vernova PSIRT, maintaining the policies, processes, and tools to triage, track, and resolve product vulnerabilities across all business units • manage end-to-end Coordinated Vulnerability Disclosure (CVD), ensuring alignment with industry standards and mandatory EU CRA notification timelines (including ENISA/CSIRT reporting) • lead the CNA (CVE Numbering Authority) program, managing the assignment and lifecycle of CVE records to ensure timely, accurate public disclosures • lead responses to product-related cybersecurity incidents at customer sites, coordinating across engineering, legal, and customer-facing teams • maintain and exercise incident response playbooks and communication templates to ensure rapid, consistent resolution • deploy AI-powered tools to automate vulnerability scoring, incident triage, and situational awareness to handle high volumes of complex threats • align PSIRT operations with the CISO’s enterprise CERT function to ensure seamless incident handling and shared situational awareness • embed PSIRT awareness across Power, Wind, and Electrification business units by establishing liaisons and defined response protocols • define and report on PSIRT performance metrics (e.g., MTTR, disclosure compliance) for executive leadership and enterprise risk reviews

🎯 Anforderungen

• 8+ years of cybersecurity experience with deep expertise in PSIRT operations, vulnerability management, or product incident response in an industrial/energy context • proven experience leading a PSIRT function, including hands-on management of coordinated disclosure and customer-facing security incidents • experience engaging with law enforcement, government agencies, and national authorities regarding sensitive cybersecurity incidents • deep familiarity with CVE, CVSS, CWE, and standards like ISO/IEC 29147/30111 • bachelor’s degree in a technical discipline • direct experience with GE Vernova products or equivalent OT/industrial energy systems (preferred) • familiarity with IEC 62443 security standards and energy-sector ISACs (e.g., E-ISAC) (preferred) • experience building or scaling a PSIRT function from the ground up (preferred) • certifications such as CISSP, GCIH, GICSP, or equivalent (preferred) • advanced degree in Cybersecurity, Computer Science, or Engineering (preferred)

🏖️ Vorteile

• medical, dental, vision, and prescription drug coverage • access to Health Coach from GE Vernova, a 24/7 nurse-based resource • access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services • GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions • access to Fidelity resources and financial planning consultants • tuition assistance • adoption assistance • paid parental leave • disability benefits • life insurance • 12 paid holidays • permissive time off