Cyber Security Engineer

Job Description Summary

The Cyber Security Engineer will be a Security Evangelist helping engineers in secure implementation of technology stack in an enterprise/cloud environment. GE Health Care is a global leader in medical technology and digital solutions, dedicated to improving lives in the moments that matter. We innovate to transform healthcare delivery and empower clinicians worldwide. Join us to turn ideas into world-changing realities in an inclusive environment where every voice matters.

• Drive tailored SDL practice into specific engineering-
• Engage in application, platform and domain-specific threat modeling and attack surface analysis/reduction
• Work closely with cross-functional teams in requirements gathering and security-focused software design
• Discover and mitigate vulnerabilities in sensitive Critical Infrastructure/ Key Resource Domains (CI/KR).
• Develop and design innovative cyber security solutions for unique and complex technologies.
• Work in partnership with government agencies, leading industry experts, and academia.
• Leverage traditional and non-traditional research methodologies to advance GE's overall Cybersecurity practice.
• Assess and investigate specific threats to an information system in terms of severity and impact.
• Create detailed reports on vulnerabilities, bugs, and design flaws found in industrial information systems.
• Create IPS/IDS rules or other mitigations to protect vulnerable systems. Plan and implement applicable risk mitigating security solutions.
• Interacting with global teams to promote consistency and maximize synergies across common software platforms
• Able to join the team and gain mastery of the Ultrasound domain and contribute towards the development Software Infrastructure.
• Leveraging technical and clinical depth to work on business initiatives aimed at innovation and quality excellence.
• Support process improvements which guide development, sustaining & support activities
• Drive world-class quality in the development and support of products
• Apply principles of SDLC and methodologies like Lean/Agile/XP, CI, Software and Product Security, Scalability, Documentation Practices, refactoring and Testing Techniques
• Understand performance parameters and assess application performance
• Proactively share information across the team, to the right audience with the appropriate level of detail and timeliness

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) with minimum of 5 years of experience
• Certification in Privacy, Security & Regulatory domain or related certification
• Experience in object-oriented design methodology and various programming languages such as C/C++
• Working knowledge in configuration management tools such as Perforce, GIT, Clear Case, etc...
• Experience in working with Windows API and application programming.
• Experience in software platform, advanced applications, user-interface design and/or systems engineering especially in the healthcare domain –preferable Ultrasound.
• Good skills in knowing how to debug software issues.
• Experience with multicore and multi-threaded software design and computing environment.

Technical Expertise

• Familiarity with identifying, analyzing, and ethically exploiting the various classes of vulnerabilities that affect executable code.
• Strong knowledge of TCP/IP networking. Ability to use Wireshark to capture and analyze network traffic.
• Hands-on experience working with Windows and Linux based systems.
• Programming skills in one or more languages (we develop using Python, C, C++, CUDA, Java and others).
• Ability to understand machine language, operating systems, common APIs, libraries, and runtime environments and how they interact with hardware, firmware, and binary code.
• Familiar with digital electronics and microcontrollers. Exposure to SCADA/DCS systems or industrial technologies.
• Knowledge of application risk identification and evaluation techniques, and knowledge of Cyber Security and related engineering functions.
• Business Acumen:
  Able to translate vulnerability information into business risks relevant to our customers.
• Strong…