We are seeking an experienced Embedded Security Engineer to join our team. In this role, you will bridge the gap between low-level embedded software development and robust cybersecurity. You will be responsible for ensuring that our eLumina devices are secure by design, compliant with international standards, and resilient against evolving threats.
Key Responsibilities:
Embedded Development: Design, develop, test, and debug embedded software, ensuring code is robust, efficient, and well-optimized.
Security Implementation: Execute the Secure Development Life Cycle (SDL) for assigned components, ensuring compliance with IEC-62443-4-2 standards.
Vulnerability Management: Perform regular code/third-party scans, manage SBOM/HBOM inventories, and remediate identified vulnerabilities.
System Hardening: Implement security features such as Secure Boot, authentication mechanisms, and system logging.
Integration & Collaboration: Work closely with hardware and cross-functional teams to integrate software with hardware, participating in code reviews and design discussions.
Validation: Conduct software verification and validation activities to ensure product quality and meet security certification requirements (e.g., BV, Exida).
Documentation: Maintain clear documentation, including technical design specs and customer-facing Secure Deployment Guides.
Required qualifications:
Education: Bachelor’s or master’s degree in computer science, Electronic & Communication Engineering, Electrical Engineering, or a related field.
Embedded Experience: 5+ years of hands-on experience in embedded software development with exposure to security standards.
Technical Proficiency:
Advanced proficiency in Embedded C/C++ for optimized code development.
Strong hands-on experience with RTOS platforms (e.g., FreeRTOS, VxWorks) managing real-time constraints.
Strong proficiency in Python for automation and security scripting.
Security Expertise:
In-depth knowledge of IEC-62443-4-2 and Secure Development Life Cycle (SDL) practices.
Experience with secure boot, authentication protocols, and device-level security hardening.
Familiarity with vulnerability management, SBOM/HBOM generation, and third-party risk assessment.
Core Competencies:
Solid understanding of hardware/software integration, memory management, and device drivers.
Excellent debugging and problem-solving abilities.
Strong communication skills, with the ability to facilitate effective collaboration with cross-functional teams and stakeholders.
Preferred Skills:
Familiarity with IEC-61850 standards for communication networks and systems in power utility automation.
Knowledge of software configuration management tools such as Git or SVN.
Relocation Assistance Provided: Yes
GE Vernova is a purpose-built energy technology company on a mission to electrify to thrive and decarbonize the world.
It is made up of three businesses -- Power, Wind, and Electrification -- with focus on accelerating the path to more reliable, affordable, and sustainable energy, while helping our customers power economies and deliver the electricity that is vital to health, safety, security, and improved quality of life.
The world needs more energy, smarter energy. With energy demand expected to grow by more than 50% in the next 20 years, we are continuously innovating to meet the moment…like we have for the past 130 years. The Energy of Change and relentless optimism are what drive us – it’s about never giving up and seeing what’s possible so that we deliver the energy technologies the world needs right now and for generations to come.
GE Vernova’s attitude and edge is embedded in its name. We retain our treasured legacy, “GE,” as an enduring and hard-earned badge of quality and ingenuity. “Ver” / “verde” signal Earth’s verdant and lush ecosystems. “Nova,” from the Latin “novus,” nods to a new, innovative era of lower carbon energy that GE Vernova will help deliver.
Together, we have the energy to change the world.
