Principal Product Security Incident Responder

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the enterprise PSIRT function at GE Vernova.

• Manage the complete process of vulnerability management and coordinated disclosure, which includes triage, tracking, remediation coordination, and public disclosure.

• Ensure that disclosure processes are in accordance with industry standards and comply with the timelines set by the EU Cyber Resilience Act.

• Report activities to ENISA and national CSIRTs.

• Supervise the entire lifecycle of CVE records through the company's CNA program.

• Lead cybersecurity incident responses related to products at customer locations.

• Facilitate incident response collaboration among engineering, legal, and commercial teams.

• Maintain and practice incident response playbooks.

• Implement AI-driven tools for vulnerability scoring, incident triage, and situational awareness.

• Foster cross-functional partnerships and governance with the enterprise CERT function and business-unit PSIRT liaisons.

• Establish and present metrics such as MTTR and disclosure compliance to executive leadership and during enterprise risk reviews.

• Collaborate with government agencies, regulators, law enforcement, and stakeholders in critical infrastructure.

⛳️ Requirements

• Extensive experience in cybersecurity, particularly in PSIRT operations, vulnerability management, or product incident response within an industrial or energy context.

• Demonstrated leadership of a PSIRT function, including hands-on management of coordinated vulnerability disclosures (CVD) and security incidents involving customers.

• Experience liaising with law enforcement, government entities, or national authorities regarding sensitive cybersecurity issues.

• Thorough understanding of CVE, CVSS, CWE, ISO/IEC 29147, and ISO/IEC 30111.

• Preferred experience with GE Vernova products or comparable OT/industrial energy systems.

• Familiarity with IEC 62443 security standards and ISACs in the energy sector, such as E-ISAC, is preferred.

• Experience in establishing or expanding a PSIRT function from the ground up is a plus.

• Professional certifications such as CISSP, GCIH, or GICSP are preferred.

• Must be legally authorized to work in the United States.

• Successful completion of a drug screening, if applicable.

• A Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related field is preferred.

🏝️ Benefits

• Discretionary annual bonus.

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Prescription drug coverage.

• Access to a Health Coach with 24/7 nurse-based support.

• Employee Assistance Program offering 24/7 confidential assessment, counseling, and referral services.

• GE Vernova Retirement Savings Plan.

• Tax-advantaged 401(k) savings plan with company matching contributions.

• Company contributions to retirement plans.

• Fidelity resources and financial planning consultants.

• Tuition assistance.

• Adoption assistance.

• Paid parental leave.

• Disability benefits.

• Life insurance.

• 12 paid holidays.

• Flexible time off.

• Opportunities for professional development and on-the-job learning.

• No relocation assistance provided.