Lead Cyber Security Engineer

Job Description Summary

The role of Lead engineer is to perform Cybersecurity activity within India and abroad project. Engineer should be capable to handle design, configuration & analysis for Cybersecurity Projects. Engineer should be able to perform support for Tendering, Validating architecture, FAT & SAT for Cybersecurity. The delivery of project should be with high quality standard.

Job Description

Roles and Responsibilities

As part of Technical Tendering / ITO

• Review any RFQs that touch on Cyber Security or could potentially have an impact on Cyber Security. List recommendations on how to proceed and list any clarifications or exceptions we might take to the bid concerning Cyber Security, using GE and GE RE Policies, coordinating with relevant teams (GS, RE, Legal).
• Assist in creating an architecture reference that could be used for Inquiry to Order (ITO) proposals that require Cyber Security.
• Assist in creating the Security Assurance Plan (SAP) for all projects which require it, be able to discuss it with relevant teams in GE and with the Customer.
• Assist in creating a BOM template for Cyber security devices using a standardized format across GA.
• Assist in creating a template that could be used for estimating costs associated with implementing cyber security (including parts, labor and testing of cyber architecture).

As part of OTR

• Assist in creating the Functional Design Spec (FDS) for the cyber security system which would also define the architecture being implemented. In conjunction work with other internal and external entities to ensure the overall Cyber security design is cohesive.
• Assist with the FAT and SAT plans relating to Cyber Security. Detail on how the security of the system will be tested. Possibly help come up with a list of subcontractors that could be used.
• Assist with configuring the Cyber security devices (Switches, hubs, servers, Jump box, etc.).

Globally

• Share best practices and lessons learned and continuously update the technical cyber security architecture, based on changing technologies, in collaboration with other engineering security leads, domain architects and experts.
• Cyber Security CAPEX deployment in the region.

Education Qualification/Requirement

• Master/Bachelors Degree in Engineering, Computer Science, Information Technology or any equivalent from an accredited university
• Experience with security designs and architectures, best practices in network topology
• Awareness of latest technical developments in the cyber security community
• Demonstrated experience with Linux, VxWorks and Windows operating systems including user account management, security / system hardening, device control, and patch management.
• Demonstrated experience with Telecom and Network Equipment (Routers, Switches, Firewalls)
• Experience with security technologies, such as
  • Symmetric and asymmetric cryptography
  • LDAP, RADIUS, SSH, SFTP, HTTPS, SYSLOG
  • Encryption, TLS, RSA and code signing
• Knowledge of cyber security standards and regulations affecting the utilities industry, such as IEC 62443, NERC CIP, IEEE 1686, IEC 62351
• Excellent oral and written communication skills
• Ability to work effectively in a team and across functions, partnering with other teams in a worldwide environment
• Open to travel for FAT/SAT support to various Region

Desired Characteristics

• Cyber security certification (ex. ISC2, SANS, ISACA, CISSP) is a plus
• Minimum 5 years of experience in project security, preferably in an Operational Technology (OT) environment
• Experience with programming and scripting languages.
• Good analytical skills with ability to identify and explain critical issues.
• Ability to work effectively with minimum supervision
• Strong customer service mindset
• Prior engineering experience is preferred
• Strong interpersonal skills
• Strong operational effectiveness and accountability.