Cyber Security Engineer

Job Description Summary
The Cyber Security Engineer will be a Security Evangelist helping engineers in secure implementation of technology stack in a enterprise/cloud environment.

GE HealthCare is a global leader in medical technology and digital solutions, dedicated to improving lives in the moments that matter. We innovate to transform healthcare delivery and empower clinicians worldwide. Join us to turn ideas into world-changing realities in an inclusive environment where every voice matters.

Job Description

Responsibilities

• Drive tailored SDL practice into specific engineering-
• Engage in application, platform and domain-specific threat modeling and attack surface
  analysis/reduction
• Work closely with cross-functional teams in requirements gathering and security-focused software design
• Discover and mitigate vulnerabilities in sensitive Critical Infrastructure/ Key Resource Domains (CI/KR).
• Develop and design innovative cyber security solutions for unique and complex technologies.
• Work in partnership with government agencies, leading industry experts, and academia.
• Leverage traditional and non-traditional research methodologies to advance GE's overall Cybersecurity practice.
• Assess and investigate specific threats to an information system in terms of severity and impact.
• Create detailed reports on vulnerabilities, bugs, and design flaws found in industrial information systems.
• Create IPS/IDS rules or other mitigations to protect vulnerable systems. Plan and implement applicable risk mitigating security solutions.
• Interacting with global teams to promote consistency and maximize synergies across common software platforms
• Able to join the team and gain mastery of the Ultrasound domain and contribute towards the development Software Infrastructure.
• Leveraging technical and clinical depth to work on business initiatives aimed at innovation and quality excellence.
• Support process improvements which guide development, sustaining & support activities
• Drive world-class quality in the development and support of products
• Apply principles of SDLC and methodologies like Lean/Agile/XP, CI, Software and Product Security, Scalability, Documentation Practices, refactoring and Testing Techniques
• Understand performance parameters and assess application performance
• Proactively share information across the team, to the right audience with the appropriate level of detail and timeliness

Required Qualifications

• Bachelor's Degree in Computer Science or "STEM" Majors (Science, Technology, Engineering and Math) with minimum 3 years of experience
• Certification in Privacy, Security & Regulatory domain or related certification
• Experience in object-oriented design methodology and various programming languages such as C/C++
• Working knowledge in configuration management tools such as Perforce, GIT, ClearCase, etc...
• Experience in working with Windows API and application programming.
• Experience in software platform, advanced applications, user-interface design and/or systems engineering especially in the healthcare domain -preferable Ultrasound.
• Good skills in knowing how to debug software issues.
• Experience with multicore and multi-threaded software design and computing environment.

Desired Characteristics

Technical Expertise:

• Familiarity with identifying, analyzing, and ethically exploiting the various classes of vulnerabilities that affect executable code.
• Strong knowledge of TCP/IP networking. Ability to use Wireshark to capture and analyze network traffic.
• Hands-on experience working with Windows and Linux based systems.
• Programming skills in one or more languages (we develop using Python, C, C++, CUDA, Java and others).
• Ability to understand machine language, operating systems, common APIs, libraries, and runtime environments and how they interact with hardware, firmware, and binary code.
• Familiar with digital electronics and microcontrollers. Exposure to SCADA/DCS systems or industrial technologies.
• Knowledge of application risk identification and evaluation techniques, and knowledge of Cyber Security and related engineering functions.
• Business Acumen: Able to translate vulnerability information into business risks relevant to our customers.
• Strong problem-solving abilities and capable of articulating specific technical topics or assignments.
• Expert in breaking down problems and estimate time for development tasks.
• Strong desire to experiment, use new tools and techniques. Can be a creative problem solver.
• Experience in software platform, advanced applications, user-interface design and/or systems engineering especially in the healthcare domain.
• Good understanding of workflow in the healthcare industry.
• Demonstrated experience with development of medical device software
• Ultrasound SW development experience
• Knowledge of ultrasound or demonstrated experience with development of medical device software

Other

• Must be willing to work onsite at least 3 days a week in Wauwatosa/Waukesha, Wisconsin
• Self-starter, energizing, results oriented and able to multi-task; tenacious and organize
• Ability to foresee obstacles, identify workarounds, leverage resources, rally teammates
• Ability to influence and build consensus with other scrum teams and leadership
• Demonstrates adaptability and openness to change, effectively navigating ambiguity and responding to evolving information, circumstances, and priorities
• Exhibits clear and strategic thinking, translating complex strategies into actionable steps. Makes timely, informed decisions and communicates priorities with clarity and precision

We will not sponsor individuals for employment visas, now or in the future, for this job opening.

Additional Information

GE HealthCare offers a great work environment, professional development, challenging careers, and competitive compensation. GE HealthCare is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE HealthCare will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

While GE HealthCare does not currently require U.S. employees to be vaccinated against COVID-19, some GE HealthCare customers have vaccination mandates that may apply to certain GE HealthCare employees.

Relocation Assistance Provided: No