Search Remote Jobs

Principal Product Security Incident Responder

đź•’ September 3

🇺🇸 United States – Remote

đź’µ $147k - $245k / year

⏰ Full Time

đź”´ Lead

👮‍♂️ Cybersecurity / Security Engineer

đź‘» Ghost score 24%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of GE Vernova

GE Vernova

10,000+ employees

đź’Ľ Consulting

📦 Logistics

🏭 Manufacturing

Consulting • Logistics • Manufacturing

GE Vernova is a leader in the energy sector with over 130 years of experience, dedicated to electrifying the world while decarbonizing it. The company offers a broad portfolio of energy solutions including gas, hydro, nuclear, and wind power technologies, aimed at providing reliable, affordable, and sustainable energy. With a strong focus on innovation, GE Vernova plays a significant role in reducing the carbon footprint of global power systems and supports the transition to net-zero emissions by 2030.

đź“‹ Description

• Lead GE Vernova's enterprise Product Security Incident Response Team function • Operate vulnerability management and coordinated disclosure end-to-end, including triage, tracking, remediation coordination, and public disclosure • Manage mandatory EU Cyber Resilience Act notification timelines, including reporting to ENISA and national CSIRTs • Manage the full lifecycle of CVE records through the company's CVE Numbering Authority program • Lead product-related cybersecurity incident responses at customer sites • Coordinate incident response across engineering, legal, and commercial teams • Maintain and exercise incident response playbooks • Deploy AI-powered tooling for vulnerability scoring, incident triage, and situational awareness • Build cross-functional PSIRT partnerships and governance with the enterprise CERT function and business-unit liaisons • Define and report metrics such as MTTR and disclosure compliance to executive leadership and enterprise risk reviews • Engage government agencies, regulators, law enforcement, and critical infrastructure stakeholders

🎯 Requirements

• Significant experience in cybersecurity, with deep expertise in PSIRT operations, vulnerability management, or product incident response in an industrial or energy context • Proven leadership of a PSIRT function, including hands-on management of coordinated vulnerability disclosure and customer-facing security incidents • Experience engaging with law enforcement, government agencies, or national authorities on sensitive cybersecurity matters • Deep familiarity with CVE, CVSS, CWE, ISO/IEC 29147, and ISO/IEC 30111 • Legally authorized to work in the United States • Preferred: Direct experience with GE Vernova products or equivalent OT/industrial energy systems • Preferred: Familiarity with IEC 62443 security standards and energy-sector ISACs, including E-ISAC • Preferred: Experience building or scaling a PSIRT function from the ground up • Preferred: Professional certifications such as CISSP, GCIH, or GICSP • Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related discipline is nice to have

🏖️ Benefits

• Discretionary annual bonus • Medical, dental, vision, and prescription drug coverage • Health Coach, a 24/7 nurse-based resource • Employee Assistance Program with 24/7 confidential assessment, counseling, and referral services • GE Vernova Retirement Savings Plan • Tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions • Fidelity resources and financial planning consultants • Tuition assistance • Adoption assistance • Paid parental leave • Disability benefits • Life insurance • 12 paid holidays • Permissive time off • Professional development and on-the-job learning and development opportunities • Relocation assistance not provided

Apply Now

Similar Jobs

đź•’ September 3

Mayvin

11 - 50

đź’Ľ Consulting

🤝 B2B

📚 Education

Court Security SME advising the U.S. Courts on process analysis, governance, and operational improvements. Developing security workflows, frameworks, and transition recommendations.

đź•’ September 2

Quisitive

501 - 1000

🏥 Healthcare

🏭 Manufacturing

📦 Logistics

Microsoft Security Coach guiding Quisitive customers through Microsoft security posture, compliance, and roadmap improvements. Advising on Copilot, AI workloads, and agent governance.

đź•’ September 1

US Anesthesia Partners

5001 - 10000

đź’Ľ Consulting

🏥 Healthcare

⚕️ Healthcare Insurance

Information Security Architect securing cloud applications and enterprise systems for a leading U.S. anesthesia practice. Advancing DevSecOps, threat modeling, and regulatory compliance across IT domains.

đź•’ September 1

Wrapbook

51 - 200

đź’Ľ Consulting

🛡️ Insurance

📦 Logistics

Principal GRC leader securing Wrapbook’s AI-powered production finance platform. Owning SOC audits, privacy compliance, data governance, and AI/ML risk frameworks.

đź•’ September 1

VAILEXA

51 - 200

🎯 Recruiter

👥 HR Tech

Product security expert translating EU CRA, EU RED, and IEC 62443 into technical controls. Leading audits, compliance validation, global risk governance, and regulatory programs for Vailexa.