Principal Product Security Incident Responder

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the enterprise PSIRT function for GE Vernova

• Manage end-to-end vulnerability management and coordinated disclosure processes, which include triage, tracking, remediation coordination, and public disclosure

• Ensure alignment of vulnerability disclosures with industry standards and the notification timelines mandated by the EU Cyber Resilience Act

• Report findings to ENISA and national CSIRTs

• Handle the complete lifecycle of CVE records as part of the CNA program

• Lead product-related cybersecurity incident responses at customer locations

• Facilitate incident response collaboration among engineering, legal, and commercial teams

• Maintain and practice incident response playbooks

• Implement AI-driven tools to automate vulnerability scoring, incident triage, and situational awareness

• Align PSIRT operations with the enterprise CERT function

• Integrate PSIRT liaisons across various business units

• Define and communicate metrics such as MTTR and disclosure compliance to executive leadership and enterprise risk assessments

• Collaborate with government agencies, regulators, law enforcement, and critical infrastructure stakeholders

⛳️ Requirements

• Extensive experience in cybersecurity, with a strong focus on PSIRT operations, vulnerability management, or product incident response in industrial or energy sectors

• Demonstrated leadership in a PSIRT function, including direct management of coordinated vulnerability disclosures (CVD) and security incidents involving customers

• Experience working with law enforcement, government agencies, or national authorities on sensitive cybersecurity issues

• In-depth knowledge of CVE, CVSS, CWE, ISO/IEC 29147, and ISO/IEC 30111

• Direct experience with GE Vernova products or similar OT/industrial energy systems is preferred

• Familiarity with IEC 62443 security standards and energy-sector ISACs, including E-ISAC, is preferred

• Experience in establishing or scaling a PSIRT function from inception is preferred

• Professional certifications such as CISSP, GCIH, or GICSP are preferred

• Formal education, including a Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field, is a plus

• Must be legally authorized to work in the United States

🏝️ Benefits

• Discretionary annual bonus

• Comprehensive medical, dental, vision, and prescription drug coverage

• Access to a Health Coach from GE Vernova, a 24/7 nurse-based resource

• Employee Assistance Program offering 24/7 confidential assessment, counseling, and referral services

• GE Vernova Retirement Savings Plan

• Tax-advantaged 401(k) savings plan with company matching contributions and additional retirement contributions

• Access to Fidelity resources and financial planning consultants

• Tuition assistance

• Adoption assistance

• Paid parental leave

• Disability benefits

• Life insurance coverage

• 12 paid holidays

• Flexible time off policies

• Opportunities for professional development

• On-the-job training and development opportunities

• Relocation assistance is not provided