Principal Product Security Incident Responder

🕒 il y a 1 mois

🇺🇸 États-Unis – Télétravail

💵 $147 000 - $245 000 / an

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

👻 Score fantôme 23%

infoinfo

🗣️🇺🇸🇬🇧 Anglais requis

Cyber Security

Postuler Maintenant
Trouver des Emplois à Distance Similaires

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Logo of GE Vernova

GE Vernova

10 000+ employés

💼 Conseil

📦 Logistique

🏭 Fabrication

Consulting • Logistics • Manufacturing

GE Vernova est un leader du secteur de l’énergie fort de plus de 130 ans d’expérience, engagé à électrifier le monde tout en le décarbonant. L’entreprise propose un large portefeuille de solutions énergétiques, incluant des technologies gaz, hydroélectriques, nucléaires et éoliennes, afin de fournir une énergie fiable, abordable et durable. Avec un fort accent mis sur l’innovation, GE Vernova joue un rôle majeur dans la réduction de l’empreinte carbone des systèmes énergétiques mondiaux et accompagne la transition vers des émissions nettes nulles d’ici 2030.

Description

• Lead GE Vernova's enterprise Product Security Incident Response Team function • Operate vulnerability management and coordinated disclosure end-to-end, including triage, tracking, remediation coordination, and public disclosure • Manage mandatory EU Cyber Resilience Act notification timelines, including reporting to ENISA and national CSIRTs • Manage the full lifecycle of CVE records through the company's CVE Numbering Authority program • Lead product-related cybersecurity incident responses at customer sites • Coordinate incident response across engineering, legal, and commercial teams • Maintain and exercise incident response playbooks • Deploy AI-powered tooling for vulnerability scoring, incident triage, and situational awareness • Build cross-functional PSIRT partnerships and governance with the enterprise CERT function and business-unit liaisons • Define and report metrics such as MTTR and disclosure compliance to executive leadership and enterprise risk reviews • Engage government agencies, regulators, law enforcement, and critical infrastructure stakeholders

🎯 Exigences

• Significant experience in cybersecurity, with deep expertise in PSIRT operations, vulnerability management, or product incident response in an industrial or energy context • Proven leadership of a PSIRT function, including hands-on management of coordinated vulnerability disclosure and customer-facing security incidents • Experience engaging with law enforcement, government agencies, or national authorities on sensitive cybersecurity matters • Deep familiarity with CVE, CVSS, CWE, ISO/IEC 29147, and ISO/IEC 30111 • Legally authorized to work in the United States • Preferred: Direct experience with GE Vernova products or equivalent OT/industrial energy systems • Preferred: Familiarity with IEC 62443 security standards and energy-sector ISACs, including E-ISAC • Preferred: Experience building or scaling a PSIRT function from the ground up • Preferred: Professional certifications such as CISSP, GCIH, or GICSP • Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related discipline is nice to have

🏖️ Avantages

• Discretionary annual bonus • Medical, dental, vision, and prescription drug coverage • Health Coach, a 24/7 nurse-based resource • Employee Assistance Program with 24/7 confidential assessment, counseling, and referral services • GE Vernova Retirement Savings Plan • Tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions • Fidelity resources and financial planning consultants • Tuition assistance • Adoption assistance • Paid parental leave • Disability benefits • Life insurance • 12 paid holidays • Permissive time off • Professional development and on-the-job learning and development opportunities • Relocation assistance not provided

Postuler Maintenant

Emplois Similaires

🕒 il y a 1 mois

Mayvin

11 - 50

💼 Conseil

🤝 B2B

📚 Éducation

Court Security SME advising the U.S. Courts on process analysis, governance, and operational improvements. Developing security workflows, frameworks, and transition recommendations.

🇺🇸 États-Unis – Télétravail

💵 $195 000 - $215 000 / an

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Quisitive

501 - 1000

🏥 Santé

🏭 Fabrication

📦 Logistique

Microsoft Security Coach guiding Quisitive customers through Microsoft security posture, compliance, and roadmap improvements. Advising on Copilot, AI workloads, and agent governance.

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

Cloud

Cyber Security

🕒 il y a 1 mois

US Anesthesia Partners

5001 - 10000

💼 Conseil

🏥 Santé

⚕️ Assurance santé

Information Security Architect securing cloud applications and enterprise systems for a leading U.S. anesthesia practice. Advancing DevSecOps, threat modeling, and regulatory compliance across IT domains.

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

Wrapbook

51 - 200

💼 Conseil

🛡️ Assurance

📦 Logistique

Principal GRC leader securing Wrapbook’s AI-powered production finance platform. Owning SOC audits, privacy compliance, data governance, and AI/ML risk frameworks.

🇺🇸 États-Unis – Télétravail

💵 $143 000 - $232 000 / an

💰 €100 000 000 Series B en 2021-11

⏰ Temps Plein

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis

🕒 il y a 1 mois

VAILEXA

51 - 200

🎯 Recrutement

👥 RH Tech

Product security expert translating EU CRA, EU RED, and IEC 62443 into technical controls. Leading audits, compliance validation, global risk governance, and regulatory programs for Vailexa.

🇺🇸 États-Unis – Télétravail

⏰ Temps Plein

🟠 Senior

🔴 Expert

👮‍♂️ Cybersécurité / Ingénieur Sécurité

🗣️🇺🇸🇬🇧 Anglais requis