Principal Product Security Incident Responder

Stack

Responsibilities

• ▹Operate the GE Vernova PSIRT, maintaining policies, processes, and tools to triage, track, and resolve product vulnerabilities across all business units
• ▹Manage end-to-end Coordinated Vulnerability Disclosure (CVD), ensuring alignment with industry standards and mandatory EU CRA notification timelines, including ENISA/CSIRT reporting
• ▹Lead the CNA (CVE Numbering Authority) program, managing the assignment and lifecycle of CVE records for timely, accurate public disclosures
• ▹Lead responses to product-related cybersecurity incidents at customer sites, coordinating across engineering, legal, and customer-facing teams
• ▹Maintain and exercise incident response playbooks and communication templates to ensure rapid, consistent resolution
• ▹Deploy AI-powered tools to automate vulnerability scoring, incident triage, and situational awareness to handle high volumes of complex threats
• ▹Align PSIRT operations with the CISO's enterprise CERT function to ensure seamless incident handling and shared situational awareness
• ▹Embed PSIRT awareness across Power, Wind, and Electrification business units by establishing liaisons and defined response protocols
• ▹Define and report on PSIRT performance metrics (e.g., MTTR, disclosure compliance) for executive leadership and enterprise risk reviews

Soft skills

About the company

GE Vernova's product security organization, led by the VP of Product Cybersecurity, is responsible for product vulnerability management and incident response across business units.