Director -Software Quality and Security

Company: General Electric
Location: Schenectady
Posted on: June 4, 2021

Job Description:

Job Description Summary

The Director -Software Product Quality and Security drives software quality &, security practices, and risk management into the business product development programs. This is a highly visible position with responsibilities to articulate threats and risk, and drive a culture of awareness, rigor, and resilience. The leader must be a communicator and collaborator, in addition to having demonstrated project and software engineering leadership.

Job Description

Essential Responsibilities

This role will function as a liaison between various engineering, product management, sourcing, legal as well as external stakeholders on software security, product quality and risk management.

• Coach and assist product development teams with secure design, including threat modeling and attack surface identification/reduction, security requirements capture, system and network hardening (secure configuration), and security validation/testing (SDLC).
• Partner with Renewable Energy leadership to drive adoption of security practices and procedures as it relates to all stand-alone software running on-premise or SaaS software running on public cloud
• Perform design and implementation reviews, vulnerability management, and incident response.
• Manage security assessments and drive remediation and security controls validation.
• Establish and evolve formal QA processes, ensuring that the team is using industry-accepted best practices.
• Oversee all aspects of quality assurance including establishing metrics, applying industry best practices, and developing new tools and processes to ensure quality goals are met
• Lead and mentor QA team members, as well as manage outside contract testers

Qualifications/Requirements

• Bachelor's Degree in Engineering, Physics, Chemistry, Mathematics, or Computer Science.
• Minimum of 5 years of experience in an engineering capacity, particularly with Industrial Internet of Things (Edge to Cloud)

Desired Characteristics

• Experience in threat modeling or cybersecurity requirements and design.
• Expertise in one or more: network design, embedded systems, software design, ethical hacking.
• Fluency in English; excellent written and presentation skills.
• Familiarity with one or more: STRIDE, OWASP, IEC 62443, NERC CIP, NIST, ISO 2700x, Achilles is a plus
• Software development, quality assurance and debugging experience
• Networking exposure (TCP/UDP, VPN, routing (BGP, etc.), VLANs, Wireshark, etc.).
• Knowledge of Security testing practices (Open source scans, Static code analysis, dynamic code analysis)
• Experience in the energy industry, or with similar critical infrastructure.

GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

Relocation Assistance Provided: Yes

Keywords: General Electric, Schenectady , Director -Software Quality and Security, Other , Schenectady, New York