Product Security Lifecycle leader
Today Chennai, India
About us
GE Vernova is helping change the world. Be part a team driven by purpose, fueled by challenge, and united in shaping the future of energy, every day.
- Size: 10,000+ employees
- Industry: Engineering
Job Description Summary
Job Description
About the role
The Product Lifecycle Leader is a specialized operational leadership position responsible for the technical execution of the Secure Development Lifecycle (SDLC) and Product Security Incident Response Team (PSIRT) operations across GE Vernova Power Conversion Solutions (PCS).
Reporting to the Senior Cybersecurity Leader, you will drive the practical implementation of security requirements and ensure all NPI and OTR programs meet rigorous technical standards throughout their lifecycle. You will exercise high levels of operational judgment to manage a team of technical specialists, deploy advanced security tooling, and lead the technical response to vulnerabilities to protect our products and global supply chain.
Key Responsibilities
SDLC Implementation & Governance
PSIRT Operations & Vulnerability Management
Innovation & Performance Tracking
Supply Chain and SBOM
Qualifications & Skills
Required
Desired
What you can expect from us:
Additional Information:
Compensation Grade: SPB2
Relocation Assistance Provided: No
Additional Information
Relocation Assistance Provided: Yes
Job Description
About the role
The Product Lifecycle Leader is a specialized operational leadership position responsible for the technical execution of the Secure Development Lifecycle (SDLC) and Product Security Incident Response Team (PSIRT) operations across GE Vernova Power Conversion Solutions (PCS).
Reporting to the Senior Cybersecurity Leader, you will drive the practical implementation of security requirements and ensure all NPI and OTR programs meet rigorous technical standards throughout their lifecycle. You will exercise high levels of operational judgment to manage a team of technical specialists, deploy advanced security tooling, and lead the technical response to vulnerabilities to protect our products and global supply chain.
Key Responsibilities
SDLC Implementation & Governance
- Operational SDLC: Drive the practical application and technical execution of security processes across all PCS NPI programs, ensuring development teams meet secure development requirements.
- Tooling & Automation: Deploy and maintain the necessary tools (SAST/DAST, automated gates) and technical training required for engineering teams to integrate security into their daily workflows.
- Supplier Security Operations: Execute the service supplier security maturity program (aligned to IEC 62443 2-4), managing the technical assessments and training for third-party partners.
- OTR Technical Support: Lead the technical integration of regional OTR teams into the standardized SDLC for application-level development.
PSIRT Operations & Vulnerability Management
- Team Leadership: Direct the daily operations, performance, and technical output of PSIRT Analysts and security specialists, acting as the senior escalation point for complex technical challenges.
- Vulnerability Management: Lead the technical intake, triage, and prioritization of vulnerabilities, providing the defensible rationale for risk thresholds and remediation paths.
- Technical Risk Execution: Direct the execution of threat modeling, penetration testing, and formal risk assessments for product releases, solving technical problems that fall outside standard parameters.
- Incident Liaison: Partner with Architecture and Engineering to ensure PSIRT findings and technical vulnerabilities are directly integrated into future design improvements.
Innovation & Performance Tracking
- Next-gen Tech: Champion the adoption of frontier AI-based code analysis to accelerate proactive vulnerability management and improve CI/CD security analysis.
- Operational Metrics: Track and report performance-level metrics, such as Mean Time to Detect (MTTD) and Mean Time to Remediate (MTTR), to measure the speed and effectiveness of the PSIRT function.
- Advisory Management: Execute the security advisory and CVE monitoring process in collaboration with Senior Cybersecurity Leader and GEV CIRT team
Supply Chain and SBOM
- SBOM Operations: Maintain SCA tooling and operationalize SBOM standards, ensuring 100% visibility into the source and binary components of product and system.
- Technical Response: Ensure all supply chain components are defined in GE Vernova's vulnerability management tool allowing for rapid impact analysis when upstream vulnerabilities are detected.
Qualifications & Skills
Required
- Experience: Significant experience in technical Cybersecurity Leadership, specifically SDLC implementation and PSIRT management.
- Leadership: Proven track record managing a team of technical specialists and driving adoption of new security technology/ tools.
- Technical Expertise: Deep knowledge of secure development lifecycle and vulnerability management, incident response and automated security testing
- Certifications: CISM, CISSP, CSSLP, GICSP or equivalent.
- Communication: Ability to simplify technical operational risk and remediation plans for senior leadership and stakeholders.
Desired
- Education: Degree in Engineering, Computer Science or Cybersecurity.
- Standards Knowledge: Experience applying standards such as IEC 62443, NIST SP 800 and the EU Cyber Resilience Act in a practical, industrial development environment.
What you can expect from us:
Additional Information:
Compensation Grade: SPB2
Relocation Assistance Provided: No
Additional Information
Relocation Assistance Provided: Yes
Additional Information
- Posted: today
Perks and Benefits
Health and Wellness
- Health Insurance
- Health Reimbursement Account (HRA)
- Dental Insurance
- Vision Insurance
- Life Insurance
- Short-Term Disability
- Long-Term Disability
- FSA
- FSA with Employer Contribution
- HSA
- HSA with Employer Contribution
- Fitness Subsidies
- On-Site Gym
- Mental Health Benefits
Parental Benefits
- Adoption Assistance Program
- Family Support Resources
- Birth Parent or Maternity Leave
- Adoption Leave
Work Flexibility
- Flexible Work Hours
- Remote Work Opportunities
- Hybrid Work Opportunities
Vacation and Time Off
- Unlimited Paid Time Off
- Paid Holidays
- Personal/Sick Days
- Summer Fridays
Financial and Retirement
- 401(K)
- Stock Purchase Program
- Performance Bonus
- Relocation Assistance
- Financial Counseling
- Profit Sharing
- 401(k) With Company Matching
Office Life and Perks
- Commuter Benefits Program
- Casual Dress
- On-Site Cafeteria
- Holiday Events
Professional Development
- Tuition Reimbursement
- Access to Online Courses
- Lunch and Learns
- Leadership Training Program
- Internship Program
- Associate or Rotational Training Program
Diversity And Inclusion
- Diversity, Equity, and Inclusion Program
- Employee Resource Groups (ERG)
- Unconscious Bias Training