Principal Product Cyber Security Architect

GE Vernova

3d • $147,000 - $245,000 • Remote

About The Position

The energy systems that power homes, businesses, and critical infrastructure depend on software and hardware that must be secure by design — not secured as an afterthought. As a Product Cybersecurity Architect at GE Vernova, you will be at the center of that work. You will partner directly with product teams across our Power, Wind, and Electrification businesses to design secure architectures, lead threat modeling, and translate security policy into practical engineering guidance. This is a hands-on individual contributor role where your technical depth will shape how security is built into GE Vernova's industrial energy products from the ground up. If you find genuine satisfaction in solving hard technical problems that matter at scale, this role was designed for you.

Requirements

• Significant experience in cybersecurity, with a focus on product, system, or architecture security
• Demonstrated experience producing security architecture deliverables, threat models, and risk assessments
• Working knowledge of IEC 62443, particularly 62443-3-2, 62443-3-3, and 62443-4-1
• Experience creating secure development artifacts such as security requirements, hardening guides, and assessment reports
• Familiarity with OT (Operational Technology) / ICS (Industrial Control Systems) product architectures and energy sector deployment environments
• Strong written communication skills, with the ability to translate technical security findings into clear, actionable guidance

Nice To Haves

• Experience working with industrial energy technology products, including GE Vernova platforms
• Experience using AI-enabled tools for threat modeling or security analysis
• Familiarity with EU Cyber Resilience Act requirements
• Experience contributing to SDL artifact libraries or security pattern catalogs
• Relevant certifications such as GICSP (Global Industrial Cyber Security Professional), CSSLP (Certified Secure Software Lifecycle Professional), or ISA/IEC 62443 certification
• A formal education and subsequent Bachelor's or Master's degree in Cybersecurity, Computer Science, Electrical Engineering, or a related field is nice to have, but we are most interested in your total experience and professional achievements.

Responsibilities

• Review secure architectures for industrial energy products — defining security zones, conduits, trust boundaries, authentication and authorization models, data protection strategies, and remote access controls.
• Develop reusable security patterns, reference architectures, and design standards that product teams can act on.
• Lead threat modeling and risk assessments aligned to IEC (International Electrotechnical Commission) 62443-3-2.
• Produce complete threat model outputs, including data flow diagrams, threat analysis, risk ratings, and prioritized recommendations.
• Leverage AI to scale and accelerate threat modeling and risk assessments — Champion and operationalize AI assisted tooling and automation to generate DFDs, threat catalogs, risk ratings, and prioritized mitigation backlogs; integrate human in the loop validation, IEC 62443 traceability, and SBOM/vulnerability data to ensure accuracy and auditability while reducing time to assessment and improving consistency.
• Translate SDL (Secure Development Lifecycle) requirements into product-specific guidance — including secure installation, configuration, hardening, and operational documentation that engineering teams can use directly in the field.
• Support SDL execution end to end by defining security requirements, conducting design reviews, evaluating security gates, and helping prepare security evidence, test documentation, and compliance artifacts.
• Build team capability by contributing reusable templates, artifact libraries, and lessons learned that raise the quality and efficiency of the broader Secure Development & Supply Chain team.
• Develop, maintain and deliver role-based training and enablement through the creation and update of learning paths for identified roles to support organizational awareness of product security program, technical, regulatory and other requirements.

Benefits

• medical, dental, vision, and prescription drug coverage
• access to Health Coach from GE Vernova, a 24/7 nurse-based resource
• access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services
• GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants
• tuition assistance
• adoption assistance
• paid parental leave
• disability benefits
• life insurance
• 12 paid holidays
• permissive time off

What This Job Offers

• Job Type: Full-time
• Career Level: Principal
• Education Level: Associate degree