Product Security Assessment Engineer

Role Overview

• Performs daily execution of internal product security testing efforts for all new product releases in GE Healthcare.
• Researches new threats, attack types, and creates simulations of potential cybersecurity attacks to products and services.
• Builds and executes testing for early detection of design flaws, vulnerabilities, weaknesses, missing security controls and secure implementation of security features.
• Requires specialized knowledge within the function.
• Influence the development of strategy for the area of responsibility, including control of resources and influences policy formulation.
• Uses LLM and Agentic AI to instrument/orchestrate testing.
• Authors and maintains reports and illustrates risk of findings in both technical and business language.
• Supports the investigation of field issues related to cybersecurity, and potential impact of new or theoretical vulnerabilities across the product landscape.
• Research and applies new methods of attack simulation.
• Interprets simple internal and external business challenges and recommends best practices to improve products, processes or services.
• Stays informed of industry trends that may inform work.
• Uses high level of judgment to make decisions and handle complex tasks or problems in areas of operational, product management, manufacturing, technology or engineering.
• Has ability to assess quality of information given and ask pertinent questions to stakeholders.
• Able to offer new solutions to problems outside of set parameters and is able to construct and provide recommendations.
• Uses multiple internal and some external sources outside of own function to help arrive at a decision.
• May lead functional teams or projects with minimal resource requirements, risk, and/or complexity.
• Communicates difficult concepts and may influence others' options on particular topics.

Requirements

• Strong oral and written communication skills.
• Strong interpersonal and leadership skills.
• Demonstrated ability to analyze and resolve problems.
• Demonstrated ability to lead programs / projects.
• Ability to document, plan, market, and execute programs.
• Established project management skills
• 3+ years experience penetration testing, Red teaming experience desirable but not required
• 5+ years experience in cybersecurity in domains of network, cloud, reverse engineering, and related.

Tech Stack

• Cloud
• Cyber Security

Benefits

• Relocation Assistance Provided: No