Product Security Representative – AI COE

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the Product Security Representative and the main point of contact for product cybersecurity concerning designated AI COE products and initiatives.

• Collaborate with engineering, machine learning, architecture, quality assurance, regulatory, and Product Security teams to incorporate cybersecurity requirements into product development and launches.

• Oversee cybersecurity assessments, threat modeling, security risk evaluations, findings, and mitigation efforts.

• Ensure that all necessary product cybersecurity documentation and records are produced and maintained throughout the product lifecycle.

• Assist in vulnerability management, SBOM, and third-party software security tasks, which involve assessing and documenting identified risks.

• Keep relevant product-security information in eSG and coordinate supporting data with program teams.

• Create consistent and reusable cybersecurity practices and artifacts across AI COE software and AI/ML releases.

• Define clear ownership and execution of PSR responsibilities across AI COE programs.

• Detect cybersecurity risks early and collaborate with engineering and Product Security teams to address them.

• Foster partnerships across Engineering, Machine Learning, Quality, Regulatory, Architecture, and Product Security.

• Empower the AI COE to scale development while ensuring disciplined, traceable, and compliant product cybersecurity practices.

⛳️ Requirements

• A Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, Biomedical Engineering, or a related technical area.

• Over 4 years of experience in product cybersecurity, software engineering, systems engineering, or cybersecurity engineering.

• Familiarity with software security, vulnerability management, threat modeling, cybersecurity risk assessment, and security requirements.

• Capability to comprehend software architectures, interfaces, dependencies, and data flows from a cybersecurity viewpoint.

• Excellent technical communication, documentation, collaboration, and problem-solving abilities.

• Experience in medical devices, healthcare products, or other regulated industries is preferred.

• Understanding of QMS, design controls, software lifecycle processes, and medical-device cybersecurity requirements is preferred.

• Experience with SBOMs, third-party/open-source software, vulnerability assessment, and cybersecurity documentation is preferred.

• Familiarity with AI/ML products and their cybersecurity considerations is preferred.

• Prior experience as a Product Security Representative or with GE HealthCare Product Security processes is preferred.

• Must be legally authorized to work in the United States.

• GE HealthCare will not provide sponsorship for employment visas, now or in the future.

• Successful completion of a drug screen, as applicable.

🏝️ Benefits

• Performance-based incentive compensation, which may include cash bonuses and/or long-term incentives (LTI).

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Paid time off.

• 401(k) plan with opportunities for employee and company contributions.

• Life insurance.

• Disability insurance.

• Accident insurance.

• Tuition reimbursement.

• Professional development opportunities.

• Positive work environment.

• Relocation assistance is not provided.