Principal Product Cyber Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Provide guidance to product teams on creating secure architectures, encompassing zones, conduits, trust boundaries, authentication, authorization, data protection, and remote access.

• Develop reusable security patterns, reference architectures, and design standards.

• Evaluate product architecture modifications and offer actionable security advice.

• Perform threat modeling and risk assessments in accordance with IEC 62443-3-2.

• Generate threat model outputs, which include data flows, threat analyses, risk ratings, and recommendations.

• Utilize AI-assisted tools to expedite threat modeling and analysis processes.

• Formulate deployment security guidance for secure installation, configuration, hardening, and operational practices.

• Assist in SDL execution by defining security requirements, conducting design reviews, and assessing security gates.

• Aid in the preparation of security evidence, test documentation, and compliance artifacts.

• Contribute reusable templates, artifacts, and insights to enhance team productivity.

⛳️ Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related discipline.

• Over 8 years of experience in cybersecurity with a solid background in product, system, or architecture security.

• Demonstrated ability to produce security architecture deliverables and threat models.

• Proficient understanding of IEC 62443, particularly 62443-3-2, 62443-3-3, and 62443-4-1.

• Experience in creating secure development outputs such as requirements, hardening guides, and assessment reports.

• Familiarity with OT/ICS product architectures and deployment environments within the energy sector.

• Excellent written communication skills.

• Experience with GE Vernova or comparable industrial energy technology products (preferred).

• Familiarity with AI tools for threat modeling or security analysis (preferred).

• Knowledge of EU Cyber Resilience Act requirements (preferred).

• Experience with SDL artifact libraries or security pattern catalogs (preferred).

• Relevant certifications such as GICSP, CSSLP, or ISA/IEC 62443 certification (preferred).

🏝️ Benefits

• Medical, dental, vision, and prescription drug coverage.

• Access to Health Coach from GE Vernova, a 24/7 nurse-based resource.

• Access to the Employee Assistance Program, which provides 24/7 confidential assessment, counseling, and referral services.

• GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings plan with company matching contributions and retirement contributions.

• Access to Fidelity resources and financial planning consultants.

• Tuition assistance.

• Adoption assistance.

• Paid parental leave.

• Disability benefits.

• Life insurance.

• 12 paid holidays.

• Permissive time off.