Advanced Lead Engineer - Product Cyber Security

Job Description Summary Looking to add your product expertise to our growing security team? Join our Aviation Product Cybersecurity team, where you will collaborate with development teams to bring product security awareness, drive threat modeling exercises, lead security-focused architecture and design reviews, oversee security testing, and validate security designs across Aviation products - including embedded products and supporting environments!

Job Description
Roles and Responsibilities

- Define embedded product security objectives, analyze product architectures for security vulnerabilities, evaluate threats and define threat vectors, qualitatively assess security risk, define and manage product security requirements, coordinate and conduct security test activities to verify security requirements, and support regulatory certification responses ensuring continued airworthiness

- Promote a culture of product security engagement across the organization which emphasizes shared responsibility in securing GE Aviation products from potential cyber threats and vulnerabilities

- Capture new business opportunities by developing product security approaches to meet customer needs, participating in technical trade studies, and generating cost estimates for product security support

- Grow the organization's capabilities by developing and sharing your knowledge of cyber security tools and methodology, and your hands-on experience with analyzing and conducting penetration tests on embedded product technologies

- Interface with customers, partner companies, suppliers, and other leadership within the company

- Create a competitive advantage for GE by developing efficient and innovative product security strategies which reduce project risk and yield more secure product designs

- Support and coordinate with interfacing organizations such as Cyber Intelligence, Systems Engineering, Safety and Quality to perform technical investigations into the validity and applicability of vulnerability claims made against GE Aviation products or components

- Contribute to the development of product security engineering processes and work instructions that support the development and continuous improvement of products and services

Education Qualification

Bachelor's degree from accredited university or college with minimum of 4 years of professional experience OR

Associates degree with minimum of7 years of professional experience OR

High School Diploma with minimum of 9 years of professional experience

Minimum of 3 years of professional experience in Embedded Systems development or Product Security.

Note: Military experience is equivalent to professional experience

Eligibility Requirement

- Ability to obtain and maintain a US Government SECRET security clearance

- Export Control Required

- Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.

Desired Characteristics

Technical Expertise:
- Highly skilled security Engineer who enjoys security work and collaborating with product managers and developers to drive the successful adoption of innovative methods in developing secure applications
- Education in STEM related field (Science, Technology, Engineering, Math)
- Experience in developing embedded systems
- Knowledge of embedded cyber security implementation and governance
- Experience in Program or Project Management
- Experience in security technologies like TPM, Secure Boot, Code Signing, Encryption, etc.
- Experience with penetration testing and ethical hacking
- Experience with coding languages (Python, C, C++, etc.)
- Experience conducting static code reviews
- Knowledge of product risk identification and evaluation techniques
- Knowledge of risk control frameworks (NIST800-53, DO-326A, DFARS RMF, etc.)
- Knowledge of secure architecture and design principles
- Solid understanding of computer architecture, especially the hardware components, software stack and protocols
- Knowledge of applied cryptography fundamentals (Encryption, Authentication, Symmetric Cryptography, Asymmetric Cryptography, etc.)

#LI-GF1

This role is restricted to U.S. persons (i.e., U.S. citizens, permanent residents, and other protected individuals under the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)) due to access to export-controlled technology. GE will require proof of status prior to employment.

Additional Information

GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual ori