Principal Product Security Incident Responder (m/f)

GE Vernova

13d•$147,000 - $245,000•Remote

About The Position

Critical infrastructure is under attack — and the tools adversaries use are evolving faster than ever. At GE Vernova, the Product Security Incident Response Team (PSIRT) Principal sits at the front line of that reality: protecting the energy systems that power hospitals, cities, and grids from vulnerabilities that, left unaddressed, carry real-world consequences. Reporting directly to the VP of Product Cybersecurity, you will lead GE Vernova's enterprise PSIRT function — owning coordinated vulnerability disclosure, managing the company's CVE Numbering Authority (CNA) program, and directing product-related incident response across Power, Wind, and Electrification business units. You will also shape how AI-powered tooling is deployed to scale PSIRT capacity as the threat landscape accelerates. This is a senior individual contributor role with enterprise-wide scope, high executive visibility, and direct engagement with government agencies, regulators, and critical infrastructure stakeholders.

Requirements

Significant experience in cybersecurity, with deep expertise in PSIRT operations, vulnerability management, or product incident response in an industrial or energy context
Proven leadership of a PSIRT function, including hands-on management of coordinated vulnerability disclosure (CVD) and customer-facing security incidents
Experience engaging with law enforcement, government agencies, or national authorities on sensitive cybersecurity matters
Deep familiarity with CVE, CVSS (Common Vulnerability Scoring System), CWE (Common Weakness Enumeration), and standards including ISO/IEC 29147 and ISO/IEC 30111

Nice To Haves

Direct experience with GE Vernova products or equivalent OT/industrial energy systems
Familiarity with IEC 62443 security standards and energy-sector ISACs (Information Sharing and Analysis Centers), including E-ISAC (Electricity Information Sharing and Analysis Center)
Experience building or scaling a PSIRT function from the ground up
Professional certifications such as CISSP (Certified Information Systems Security Professional), GCIH (GIAC Certified Incident Handler), or GICSP (Global Industrial Cyber Security Professional)
A formal education and subsequent Bachelor's or Master's degree in Cybersecurity, Computer Science, Engineering, or a related discipline is nice to have, but we are most interested in your total experience and professional achievements.

Responsibilities

Lead vulnerability management and coordinated disclosure — operate the GE Vernova PSIRT end-to-end: triage, tracking, remediation coordination, and public disclosure aligned to industry standards and mandatory EU Cyber Resilience Act (CRA) notification timelines, including reporting to ENISA (European Union Agency for Cybersecurity) and national CSIRTs (Computer Security Incident Response Teams).
Run the CNA program — manage the full lifecycle of CVE (Common Vulnerabilities and Exposures) records, ensuring timely and accurate public disclosures across all GE Vernova product lines.
Direct product-related incident response — lead responses to cybersecurity incidents at customer sites, coordinating across engineering, legal, and commercial teams; maintain and exercise incident response playbooks to ensure consistent, rapid resolution.
Deploy AI-powered tooling — automate vulnerability scoring, incident triage, and situational awareness to meet the growing volume of threats driven by large language models, autonomous agentic systems, and adversaries targeting operational technology (OT) environments.
Build cross-functional partnerships and governance — align PSIRT operations with the enterprise CERT (Computer Emergency Response Team) function; embed PSIRT liaisons across business units; define and report on key performance metrics such as Mean Time to Remediate (MTTR) and disclosure compliance for executive leadership and enterprise risk reviews.

Benefits

medical, dental, vision, and prescription drug coverage
access to Health Coach from GE Vernova, a 24/7 nurse-based resource
access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services
GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants
tuition assistance
adoption assistance
paid parental leave
disability benefits
life insurance
12 paid holidays
permissive time off
discretionary annual bonus