Senior Systems Security Engineer

Job Description Summary

This senior position is responsible for designing highly complex modules, critical components, or entire applications/products, integrating them across multiple systems, and ensuring their security and compliance to quality. The role involves technical leadership in architecture, scalability, availability, performance, and security, aligning with the product/application roadmap.

Job Description

Responsibilities:

• Technical Leadership: Drive the design and development efforts related to architecture, scalability, availability, performance, and security.
• Project Execution: Wing-to-wing execution of technical projects to deliver high-quality outcomes to internal and external customers.
• Collaboration: Work closely with Product Manager, Program Manager, functional owners, project technical team, and inter-dependencies team.
• Risk Management: Execute Risk Management procedures, leading to compliant and effective mitigation of product risks.
• Design Strategies: Implement design strategies like requirement management, test for reliability, FMEA, CAPA, and demonstrate compliance to various standards and processes.
• Technical Specifications: Develop technical specifications, analyze risk and requirements, and continuously improve product/technical design/processes.
• Software Safety: Ensure identification of potential causes of Software Item failure and their mitigations, establish Software System Safety Classification, and verify software requirements, architectural design, and detailed design.
• Verification and Validation: Ensure verification of software integration test and software system test procedures, and complete Design Verification and Validation activities.
• Configuration Management: Define and maintain Software Configuration Management process and lead the Software Problem Resolution process.
• Sprint Reviews: Review issues during Sprints to determine if additional Stories need to be added to the backlog.
• Security Compliance: Lead HIPAA and GDPR assessment and compliance, and approve Security and Privacy design.
• Threat Detection: Hunt, detect, and respond to digital security threats, demonstrating technical leadership in malware, emerging threats, and calculating risk.
• Identity Management: Develop approaches to address the implementation of Identity and Access Management (IdAM) solutions, implement Privilege Identity Management solutions, and work with Attribute-Based Access Control (ABAC) solutions.
• Security Consultation: Consult developers on security requirements, maintain documentation of design patterns/recipes for common security requirements, and ensure issues identified are appropriately prioritized and addressed in future product releases.
• Security Tools: Architect, design, implement, support, and evaluate security-focused tools, and evaluate and recommend new and emerging security products and technologies.

Required Qualifications: 

• Bachelor's Degree in Computer Science or STEM Majors (Science, Technology, Engineering, and Math)
• Minimum of 8 years of experience in IT Security, system administration, LDAP, and scripting
• Minimum of 5 years of experience in design and development efforts related to architecture, scalability, availability, performance
• Minimum of 2 years of experience in technical project management

Desired Characteristics:

• Technical Expertise: Understands technical and business discussions relative to future architecture direction aligning with business goals, concepts of setting and driving architecture direction, and architecture standards concepts to apply to project work.
• Supporting Technologies: General understanding of supporting technologies including SOAP, OAuth, SAML, OpenID Connect, HTTP, XML, LDAP, SQL, and XACML.
• IAM Solutions: Experience with IAM solutions like Cyber-Ark, Ping Identity, Siteminder, Attribute Exchange Network.
• Communication Skills: Excellent written and verbal communication skills, especially experience with executive-level communications.
• Team Collaboration: Foster a collaborative and cooperative team environment, encouraging input and participation from all members.
• Service Provider Environments: Experience in large service provider environments.
• Scripting Skills: Scripting skills (e.g., Perl, shell scripting).
• Web Applications: Experience with web-based applications and/or web services-based applications, especially at large scale.
• Agile Management: Experience with Agile Management.

For U.S. based positions only, the pay range for this position is $172,040.00-$258,060.00 Annual. It is not typical for an individual to be hired at or near the top of the pay range and compensation decisions are dependent on the facts and circumstances of each case. The specific compensation offered to a candidate may be influenced by a variety of factors including skills, qualifications, experience and location. In addition, this position may also be eligible to earn performance based incentive compensation, which may include cash bonus(es) and/or long term incentives (LTI). GE HealthCare offers a competitive benefits package, including not but limited to medical, dental, vision, paid time off, a 401(k) plan with employee and company contribution opportunities, life, disability, and accident insurance, and tuition reimbursement.

While GE HealthCare does not currently require U.S. employees to be vaccinated against COVID-19, some GE HealthCare customers have vaccination mandates that may apply to certain GE HealthCare employees.