Cyber Security Engineer

GE HealthCare • Waukesha, WI

11h • Onsite

About The Position

The Cyber Security Engineer will be a Security Evangelist helping engineers in secure implementation of technology stack in a enterprise/cloud environment. GE HealthCare is a global leader in medical technology and digital solutions, dedicated to improving lives in the moments that matter. We innovate to transform healthcare delivery and empower clinicians worldwide. Join us to turn ideas into world-changing realities in an inclusive environment where every voice matters.

Requirements

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with minimum of 5 years of experience
• Certification in Privacy, Security & Regulatory domain or related certification
• Experience in object-oriented design methodology and various programming languages such as C/C++
• Working knowledge in configuration management tools such as Perforce, GIT, ClearCase, etc...
• Experience in working with Windows API and application programming.
• Experience in software platform, advanced applications, user-interface design and/or systems engineering especially in the healthcare domain –preferable Ultrasound.
• Good skills in knowing how to debug software issues.
• Experience with multicore and multi-threaded software design and computing environment.
• Must be willing to work onsite at least 3 days a week in Wauwatosa/Waukesha, Wisconsin
• Self-starter, energizing, results oriented and able to multi-task; tenacious and organize
• Ability to foresee obstacles, identify workarounds, leverage resources, rally teammates
• Ability to influence and build consensus with other scrum teams and leadership
• Demonstrates adaptability and openness to change, effectively navigating ambiguity and responding to evolving information, circumstances, and priorities
• Exhibits clear and strategic thinking, translating complex strategies into actionable steps.
• Makes timely, informed decisions and communicates priorities with clarity and precision
• We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Nice To Haves

• Familiarity with identifying, analyzing, and ethically exploiting the various classes of vulnerabilities that affect executable code.
• Strong knowledge of TCP/IP networking.
• Ability to use Wireshark to capture and analyze network traffic.
• Hands-on experience working with Windows and Linux based systems.
• Programming skills in one or more languages (we develop using Python, C, C++, CUDA, Java and others).
• Ability to understand machine language, operating systems, common APIs, libraries, and runtime environments and how they interact with hardware, firmware, and binary code.
• Familiar with digital electronics and microcontrollers.
• Exposure to SCADA/DCS systems or industrial technologies.
• Knowledge of application risk identification and evaluation techniques, and knowledge of Cyber Security and related engineering functions.
• Able to translate vulnerability information into business risks relevant to our customers.
• Strong problem-solving abilities and capable of articulating specific technical topics or assignments.
• Expert in breaking down problems and estimate time for development tasks.
• Strong desire to experiment, use new tools and techniques.
• Can be a creative problem solver.
• Experience in software platform, advanced applications, user-interface design and/or systems engineering especially in the healthcare domain.
• Good understanding of workflow in the healthcare industry.
• Demonstrated experience with development of medical device software Ultrasound SW development experience
• Knowledge of ultrasound or demonstrated experience with development of medical device software

Responsibilities

• Drive tailored SDL practice into specific engineering- Engage in application, platform and domain-specific threat modeling and attack surface analysis/reduction
• Work closely with cross-functional teams in requirements gathering and security-focused software design
• Discover and mitigate vulnerabilities in sensitive Critical Infrastructure/ Key Resource Domains (CI/KR).
• Develop and design innovative cyber security solutions for unique and complex technologies.
• Work in partnership with government agencies, leading industry experts, and academia.
• Leverage traditional and non-traditional research methodologies to advance GE's overall Cybersecurity practice.
• Assess and investigate specific threats to an information system in terms of severity and impact.
• Create detailed reports on vulnerabilities, bugs, and design flaws found in industrial information systems.
• Create IPS/IDS rules or other mitigations to protect vulnerable systems.
• Plan and implement applicable risk mitigating security solutions.
• Interacting with global teams to promote consistency and maximize synergies across common software platforms
• Able to join the team and gain mastery of the Ultrasound domain and contribute towards the development Software Infrastructure.
• Leveraging technical and clinical depth to work on business initiatives aimed at innovation and quality excellence.
• Support process improvements which guide development, sustaining & support activities
• Drive world-class quality in the development and support of products
• Apply principles of SDLC and methodologies like Lean/Agile/XP, CI, Software and Product Security, Scalability, Documentation Practices, refactoring and Testing Techniques
• Understand performance parameters and assess application performance
• Proactively share information across the team, to the right audience with the appropriate level of detail and timeliness

Benefits

• GE HealthCare offers a great work environment, professional development, challenging careers, and competitive compensation.
• GE HealthCare is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
• GE HealthCare will only employ those who are legally authorized to work in the United States for this opening.
• Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level