Senior Staff Cyber Security Architect

This is a fully remote position, open to applicants in United States.

📋 Description

• Assess secure architectures for industrial energy products.

• Establish security zones, conduits, trust boundaries, authentication and authorization models, data protection strategies, and remote access controls.

• Create reusable security patterns, reference architectures, and design standards.

• Lead threat modeling and risk assessments that align with IEC 62443-3-2.

• Generate data flow diagrams, conduct threat analysis, assign risk ratings, and provide prioritized recommendations.

• Advocate for and implement AI-assisted tools and automation for threat modeling and risk assessments.

• Produce DFDs, threat catalogs, risk ratings, and prioritized mitigation backlogs with human-in-the-loop validation.

• Integrate IEC 62443 traceability and SBOM/vulnerability data to enhance accuracy, auditability, assessment speed, and consistency.

• Convert SDL requirements into secure installation, configuration, hardening, and operational guidance tailored to products.

• Aid in SDL execution by defining security requirements, conducting design reviews, evaluating security gates, and preparing security evidence, test documentation, and compliance artifacts.

• Contribute reusable templates, artifact libraries, and lessons learned to the Secure Development & Supply Chain team.

• Develop, maintain, and provide role-based training and learning paths to foster organizational awareness of product security, technical, regulatory, and other requirements.

• Collaborate with product teams across GE Vernova's Power, Wind, and Electrification divisions.

⛳️ Requirements

• Extensive experience in cybersecurity, concentrating on product, system, or architecture security.

• Proven track record in producing security architecture deliverables, threat models, and risk assessments.

• Solid understanding of IEC 62443, especially 62443-3-2, 62443-3-3, and 62443-4-1.

• Experience in developing secure development artifacts such as security requirements, hardening guides, and assessment reports.

• Knowledge of OT / ICS product architectures and deployment environments within the energy sector.

• Excellent written communication skills, with the ability to translate technical security findings into clear, actionable guidance.

• Background in working with industrial energy technology products, including GE Vernova platforms.

• Experience utilizing AI-enabled tools for threat modeling or security analysis.

• Familiarity with the requirements of the EU Cyber Resilience Act.

• Experience contributing to SDL artifact libraries or security pattern catalogs.

• Relevant certifications such as GICSP, CSSLP, or ISA/IEC 62443 certification.

• A Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field is preferred but not mandatory.

• Must possess legal authorization to work in the United States.

• Successful completion of a drug screening may be required.

🏝️ Benefits

• Discretionary annual bonus.

• Medical, dental, vision, and prescription drug coverage.

• Access to a Health Coach from GE Vernova, a 24/7 nurse-based resource.

• Employee Assistance Program offering 24/7 confidential assessment, counseling, and referral services.

• GE Vernova Retirement Savings Plan.

• Tax-advantaged 401(k) savings opportunity with company matching contributions and retirement contributions.

• Fidelity resources and financial planning consultants.

• Tuition assistance.

• Adoption assistance.

• Paid parental leave.

• Disability benefits.

• Life insurance.

• 12 paid holidays.

• Permissive time off.

• Opportunities for professional development.

• On-the-job learning and development.

• Relocation assistance is not provided.