Principal Cyber Security Architect

This is a fully remote position, open to applicants in New York, +1 more state.

📋 Description

• Lead and execute thorough cybersecurity evaluations of wind turbine components, SCADA systems, Wind Farm software, and digital service platforms.

• Carry out assessments in accordance with established engineering processes and GE Vernova’s Secure Development Lifecycle, in alignment with IEC 62443 standards.

• Assist in the interpretation and application of security controls during the phases of requirements definition, design development, and product validation.

• Conduct threat modeling and risk assessments for both new and existing products and features.

• Identify and document security vulnerabilities, risks, and non-conformities while providing remediation recommendations.

• Collaborate with product development, engineering, projects, services, and R&D teams to embed security-by-design principles.

• Suggest and drive high-level security enhancements for wind farms across various subsystems.

• Oversee the development and management of technologies that support cybersecurity assessments.

• Evaluate customer-facing documentation against security best practices and the designed security requirements.

• Enhance internal product security processes and guidelines, including hardening guides.

• Offer technical guidance for customer inquiries and manage product incident/vulnerability response activities.

• Report to the Wind Product Security Leader and play a role in shaping the product cybersecurity strategy.

⛳️ Requirements

• Bachelor’s Degree from an accredited institution in Engineering, Computer Science, Cybersecurity, Information Technology, or a related field.

• A minimum of 12 years of relevant experience in cybersecurity or operational technology (OT).

• At least 8+ years of experience in operational technology (OT) cybersecurity or product cybersecurity.

• Willingness and ability to travel up to 10%; travel may increase to 20% for candidates not based in the Greenville, SC or Schenectady, NY regions.

• At least 4 years of experience with product security requirements, regulations, and/or standards, such as the IEC 62443 series or equivalent.

• Proven knowledge and comprehension of cybersecurity tools and solutions, including firewalls, antivirus, SIEM, and IDS/IPS.

• Familiarity with wind turbine products and/or SCADA product/cybersecurity knowledge.

• Understanding of network cybersecurity practices.

• Experience with Docker, Kubernetes, and related security best practices.

• Cybersecurity certifications such as GICSP, CEH, CCNA, or CISSP.

• Knowledge of cloud security principles and practices.

• Experience with secure coding practices across any programming language.

• Proficiency in penetration testing and vulnerability assessment tools for OT environments.

• Strong grasp of OT technologies such as PLCs and industrial protocols, including Modbus, Profinet, DNP3, OPC (DA, AE, UA), and IEC 61850.

• Ability to work autonomously and collaboratively within a cross-functional team.

• Excellent oral and written communication skills; a demonstrated ability to analyze and resolve issues.

• Experience addressing product cybersecurity vulnerabilities and handling cybersecurity inquiries.

• Legally authorized to work in the United States.

• Successful completion of a drug screening, if applicable.

🏝️ Benefits

• Medical, dental, vision, and prescription drug coverage.

• Health Coach from GE Vernova, a 24/7 nurse-based resource.

• Employee Assistance Program offering 24/7 confidential assessment, counseling, and referral services.

• GE Vernova Retirement Savings Plan.

• Tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions.

• Access to Fidelity resources and financial planning consultations.

• Tuition assistance.

• Adoption assistance.

• Paid parental leave.

• Disability benefits.

• Life insurance.

• 12 paid holidays.

• Flexible time off.

• Discretionary annual bonus.

• Relocation assistance.