Principal Product Security Incident Responder (m/f)

GE Vernova
UK
22 days ago
Apply on dejobs.org
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Compensation
£147,000.0
Working hours
Regular working hours
Job source

Tech stack

Artificial Intelligence Cyber Security Information Systems Security Architecture Professional Software Vulnerability Management Software Security Mttr Information Technology

Job description

  • Lead vulnerability management and coordinated disclosure - operate the GE Vernova PSIRT end-to-end: triage, tracking, remediation coordination, and public disclosure aligned to industry standards and mandatory EU Cyber Resilience Act (CRA) notification timelines, including reporting to ENISA (European Union Agency for Cybersecurity) and national CSIRTs (Computer Security Incident Response Teams).
  • Run the CNA program - manage the full lifecycle of CVE (Common Vulnerabilities and Exposures) records, ensuring timely and accurate public disclosures across all GE Vernova product lines.
  • Direct product-related incident response - lead responses to cybersecurity incidents at customer sites, coordinating across engineering, legal, and commercial teams; maintain and exercise incident response playbooks to ensure consistent, rapid resolution.
  • Deploy AI-powered tooling - automate vulnerability scoring, incident triage, and situational awareness to meet the growing volume of threats driven by large language models, autonomous agentic systems, and adversaries targeting operational technology (OT) environments.
  • Build cross-functional partnerships and governance - align PSIRT operations with the enterprise CERT (Computer Emergency Response Team) function; embed PSIRT liaisons across business units; define and report on key performance metrics such as Mean Time to Remediate (MTTR) and disclosure compliance for executive leadership and enterprise risk reviews.

Who You Are

You bring significant experience in PSIRT operations and vulnerability management, with a track record of leading coordinated disclosure programs in complex, regulated, or industrial environments. You are comfortable engaging government authorities and law enforcement on sensitive matters, and you understand how emerging AI capabilities are reshaping the threat landscape for critical infrastructure.

Requirements

  • Significant experience in cybersecurity, with deep expertise in PSIRT operations, vulnerability management, or product incident response in an industrial or energy context
  • Proven leadership of a PSIRT function, including hands-on management of coordinated vulnerability disclosure (CVD) and customer-facing security incidents
  • Experience engaging with law enforcement, government agencies, or national authorities on sensitive cybersecurity matters
  • Deep familiarity with CVE, CVSS (Common Vulnerability Scoring System), CWE (Common Weakness Enumeration), and standards including ISO/IEC 29147 and ISO/IEC 30111

Preferred

  • Direct experience with GE Vernova products or equivalent OT/industrial energy systems
  • Familiarity with IEC 62443 security standards and energy-sector ISACs (Information Sharing and Analysis Centers), including E-ISAC (Electricity Information Sharing and Analysis Center)
  • Experience building or scaling a PSIRT function from the ground up
  • Professional certifications such as CISSP (Certified Information Systems Security Professional), GCIH (GIAC Certified Incident Handler), or GICSP (Global Industrial Cyber Security Professional)

Education

A formal education and subsequent Bachelor’s or Master’s degree in Cybersecurity, Computer Science, Engineering, or a related discipline is nice to have, but we are most interested in your total experience and professional achievements.

Benefits & conditions

For candidates applying to a U.S. based position, the pay range for this position is between $147,000.00 and $245,000.00. The Company pays a geographic differential of 110%, 120% or 130% of salary in certain areas. The specific pay offered may be influenced by a variety of factors, including the candidate’s experience, education, and skill set.

Bonus eligibility: discretionary annual bonus.

This posting is expected to remain open for at least seven days after it was posted on September 03, 2026.

Available benefits include medical, dental, vision, and prescription drug coverage; access to Health Coach from GE Vernova, a 24/7 nurse-based resource; and access to the Employee Assistance Program, providing 24/7 confidential assessment, counseling and referral services. Retirement benefits include the GE Vernova Retirement Savings Plan, a tax-advantaged 401(k) savings opportunity with company matching contributions and company retirement contributions, as well as access to Fidelity resources and financial planning consultants. Other benefits include tuition assistance, adoption assistance, paid parental leave, disability benefits, life insurance, 12 paid holidays, and permissive time off.

GE Vernova Inc. or its affiliates (collectively or individually, “GE Vernova”) sponsor certain employee benefit plans or programs GE Vernova reserves the right to terminate, amend, suspend, replace, or modify its benefit plans and programs at any time and for any reason, in its sole discretion. No individual has a vested right to any benefit under a GE Vernova welfare benefit plan or program. This document does not create a contract of employment with any individual.

About the company

GE Vernova employees rise to the challenge of building a world that works. In order to meet this mission, we provide varied, competitive benefits to help support our workforce. Our benefits are designed to reward high performers and help you manage your personal and family needs. We offer a robust benefits package depending on your employment status and your national requirements. A healthy, balanced lifestyle can mean different things to different people - we’ve created programs that support the way you live and work today. GE Vernova also invests to provide opportunities to grow your career by providing a path for continued on-the-job learning and development., GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation. GE Vernova is an Equal Opportunity Employer (https://www.eeoc.gov/sites/default/files/2022-10/22-088_EEOC_KnowYourRights_10_20.pdf) . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE Vernova will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on dejobs.org
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

1:30 min

The universal and shared team responsibility of software security

Julia Wilson Julia Wilson +1 · World Congress 2025

4:11 min

Introduction to cloud-native application developer security

Micah Silverman · World Congress 2022

3:08 min

Aligning engineering processes with core business impact metrics

Chris Riley · World Congress 2021

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

3:55 min

Establishing blameless dialogue surrounding critical software security vulnerabilities

Chris Heilmann +2 · LIVE

3:44 min

Current industry adoption and future security initiatives

Alexander Allmendinger · LIVE

Videos

See all

Related articles

See all