At a Glance
- Tasks: Lead the Secure Development Lifecycle and manage product vulnerabilities in a dynamic tech environment.
- Company: Join GE, a leader in innovative technology and cybersecurity solutions.
- Benefits: Competitive salary, diverse workplace, and opportunities for professional growth.
- Other info: Collaborative team culture with a focus on continuous learning and innovation.
- Why this job: Make a real impact on cybersecurity in cutting-edge HVDC technology.
- Qualifications: Bachelor's degree in Engineering or IT and experience in secure software development.
The predicted salary is between 60000 - 80000 £ per year.
Overview
The HVDC Product Security Leader (PSL) leads the Secure Development Lifecycle (SDL) process on all NPI/Product care scope and coordinates with Development and Validation Teams along with domain experts and CTHs associated.
This role tracks and validates SDL artifacts from specifications to test, delivery and monitoring, and manages product/system vulnerabilities and incidents in coordination with concerned teams.
The PSL reports to the HVDC NPI Leader and functionally to the Global GSI Cybersecurity Leader.
Responsibilities
- Execute the Secure Development Lifecycle (SDL) and Incident and Vulnerability Management compliance according to GE policies.
This includes requirements definition, threat modeling, static code analysis results analysis, high level design validation and test strategy specifications, security assessments, penetration testing, secure deployment guides, and security bulletins publication.
- Coordinate with R&D software teams to ensure all relevant SDL artifacts are ready and verified for the NPI technical reviews and tracking.
- Contribute to decisions related to technology choices and design to align with the cybersecurity strategy and roadmap.
- Contribute to cybersecurity testing tools specifications, testing, and evaluation of new security technology and products.
- Implement the cybersecurity vulnerability and incident process, including vulnerability assessment, solution definition (in collaboration with the development team), communication with external parties where applicable, and drafting security advisories.
- Share best practices and lessons learned; continuously update the technical cybersecurity architecture in collaboration with other product security leads, domain architects and experts.
- Develop and conduct relevant security training for internal audiences, such as product managers, software engineers and technical support.
- Required qualifications
- Bachelor’s Degree in Engineering, Computer Science, or Information Technology from an accredited university.
- Experience with secure software development (SDL) and security best practices in software development.
- Extensive experience in secure software design, secure coding, and security testing (including static code analysis), preferably in an Operational Technology (OT) environment.
- Demonstrated knowledge of network communications protocols in the TCP/IP stack.
- Awareness of latest technical developments in the cybersecurity community.
- Demonstrated experience with Linux, Vx Works and Windows operating systems including user account management, security/system hardening, device control, and patch management.
- Experience with Telecom and Network Equipment (Routers, Switches, Firewalls).
- Experience with secure testing tools, fuzzing, and vulnerability assessment reviews.
- Experience with security technologies such as cryptography, PKI infrastructure, LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG, TLS, RSA and code signing.
- Knowledge of cybersecurity standards and regulations affecting the utilities industry (e. g., IEC 62443, NERC CIP, IEEE 1686, IEC 62351).
- Excellent oral and written communication skills; ability to work effectively in a team and across functions in a worldwide environment.
- Preferred qualifications
- Experience with penetration testing.
- Knowledge of industrial communication protocols (Modbus, DNP3/IEC-104, IEC 61850).
- Cybersecurity certifications (e. g., ISC2, SANS, ISACA, CISSP).
- Experience with programming and scripting languages.
- Strong customer service mindset and interpersonal/leadership skills.
EEO Statement
GE is an equal opportunity employer and supports diversity.
#J-18808-Ljbffr
HVDC NPI - Product Security Leader in Stafford employer: AL8238 UK Grid Solutions Limited
At GE Vernova, we pride ourselves on being a leader in the energy transition, offering our employees a dynamic work environment that fosters innovation and collaboration. As a Principal Engineer in Control System Performance, you will not only contribute to cutting-edge HVDC technology but also benefit from extensive professional development opportunities, mentorship from industry experts, and a culture that values diversity and inclusion. Located in a vibrant area with access to top-tier resources and networking opportunities, GE Vernova is committed to empowering its employees to drive meaningful change in the energy sector.
Contact Details:
AL8238 UK Grid Solutions Limited Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land HVDC NPI - Product Security Leader in Stafford
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including AL8238 UK Grid Solutions Limited, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through AL8238 UK Grid Solutions Limited
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at AL8238 UK Grid Solutions Limited. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace HVDC NPI - Product Security Leader in Stafford
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at AL8238 UK Grid Solutions Limited insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to AL8238 UK Grid Solutions Limited that you’re committed to staying ahead in the game.
How to prepare for a job interview at AL8238 UK Grid Solutions Limited
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at AL8238 UK Grid Solutions Limited to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at AL8238 UK Grid Solutions Limited.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
