Job Overview:
General Electric (GE) Vernova is seeking a motivated Staff Cloud Security Engineer responsible for strategic technical development, Including cloud security automation capabilities in AWS and Azure. The successful candidate will have strong problem-solving, time management and analytical skills. As part of the GE Cybersecurity team, a curiosity to learn combined with a builder-attitude will be critical in our mission to address evolving threats and protect company information and resources.
Specific Responsibilities Include:
Design, build and implement enterprise cyber technology for production environments
Align technical risk management standards, frameworks and policy with overall GE Vernova business and digital requirements.
Drive efforts with program application leads and stakeholders to architect Cloud solutions using tools and services aligned to standards and secure design patterns.
Design and implement automated security controls (AWS SCP, Azure Policy, Cloud Custodian, Wiz.io remediation) to proactively enforce Security, Risk and Compliance standards for applications.
Develop libraries of common secure patterns for deploying cloud infrastructure and applications, including applications provided by GE Vernova Cloud Service Providers
Provide mechanism to demonstrate consistent application of controls and configurations, including creation of real-time tool providing across GE Power cloud accounts.
Engineer secure technology solutions that promote adoption of SecDevOps and Cloud services (IaaS, PaaS & SaaS).
Understand current and evolving threats for Cloud, including mitigation tools and techniques.
Research, recommend and implement controls for developing technology such as container orchestration, machine learning and serverless technologies.
Apply native cloud service provider security and monitoring services in the cloud, including network access controls, encryption, alerting and secrets management.
Identify security design gaps in existing and proposed architectures and recommend and deploy changes and enhancements
Basic Qualifications:
Bachelor’s degree or equivalent knowledge or experience in Information Systems (IS), Information Technology (IT), Computer Science or Engineering from an accredited college or university;
Minimum significant experience architecting secure Cloud platforms (AWS or Azure);
Minimum significant experience with programming or scripting languages;
Minimum proven experience with Cloud automation capabilities
Eligibility Requirements: (Country Specific)
India, Budapest (GE Vernova locations preferred) & Remote.
Desired Characteristics:
Experience reviewing and understanding cloud architecture and security best practices.
Highly technical, eager to learn with strong analytical and problem-solving skills.
Working knowledge of Cloud provider security architecture, resilience and compliance design patterns
Experience delivering compliance automation via AWS SCP, Azure Policy, Cloud Custodian and CNAPP or CSPM tooling.
Knowledge of current programming language (Python preferred), source code management and related technology to evaluate infrastructure as code safeguards.
Knowledge of cloud automation technologies at scale, including CloudFormation, Terraform
Ability to define program KPIs and metrics.
Experience leveraging agile methods within development and project efforts.
Experience performing design reviews to assess security risk for application architecture or introduction of new cloud services.
Experienced in Cloud operations and use of threat intelligence services in a global regulatory environment
Knowledge of IT service management and cybersecurity processes including change management, incident management, configuration management, threat and vulnerability management.
Advanced degree In Information Systems, Information Technology, Computer Science or Engineering from an accredited college or university.
Associate or Professional-level Cloud certification(s).