Product Security Assessment Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Responsible for the daily execution of internal product security testing initiatives for all new product launches within GE Healthcare.

• Investigates emerging threats and attack methodologies, creating simulations of potential cybersecurity attacks targeting products and services.

• Develops and implements testing procedures for the early identification of design flaws, vulnerabilities, weaknesses, absent security controls, and the secure integration of security features.

• Requires specialized knowledge within the domain.

• Shapes the strategy for the area of responsibility, including managing resources and influencing policy development.

• Utilizes LLM and Agentic AI to facilitate and coordinate testing activities.

• Prepares and updates reports, illustrating the risks associated with findings in both technical and business-oriented language.

• Assists in the investigation of field issues related to cybersecurity and evaluates the potential impacts of new or theoretical vulnerabilities across the product spectrum.

• Researches and implements new approaches for attack simulation.

• Analyzes straightforward internal and external business challenges and proposes best practices to enhance products, processes, or services.

• Keeps abreast of industry trends that may inform work practices.

• Employs a high level of judgment to make decisions and address complex tasks or issues in operational, product management, manufacturing, technology, or engineering domains.

• Possesses the capability to evaluate the quality of information provided and pose relevant questions to stakeholders.

• Capable of proposing innovative solutions to challenges beyond established parameters and able to formulate and present recommendations.

• Utilizes multiple internal and some external resources beyond their function to inform decision-making.

• May lead functional teams or projects with minimal resource needs, risk, and/or complexity.

• Communicates challenging concepts and may sway others' opinions on specific topics.

⛳️ Requirements

• Excellent oral and written communication abilities.

• Strong interpersonal and leadership capabilities.

• Proven capacity to analyze and resolve issues.

• Demonstrated experience in leading programs and projects.

• Competence in documenting, planning, marketing, and executing programs.

• Established skills in project management.

• Over 3 years of experience in penetration testing, with Red teaming experience preferred but not mandatory.

• More than 5 years of experience in cybersecurity, covering areas such as network, cloud, reverse engineering, and related fields.

🏝️ Benefits

• Relocation Assistance Provided: No