Description

Senior Staff Cyber Security Architect, General Electric Company, Cincinnati, OH:  

Develop and implement cloud security strategies and roadmaps to protect cloud-based operations effectively. Responsible for  designing and implementing robust cloud security solutions on both AWS and Microsoft Azure platforms. Advise on security policies,  standards, and procedures to ensure compliance with regulatory requirements. Implement and manage security monitoring and  incident response solutions. Advise on security incidents and vulnerabilities, providing recommendations for mitigation. Ensure cloud  environments adhere to industry compliance standards. Assist with audits and compliance assessments. Implement security  automation and orchestration to enhance security posture and response capabilities. Conduct risk assessments and vulnerability  assessments, identifying and prioritizing security risks. Create and maintain detailed security documentation, including security  architecture diagrams and incident reports. Understanding cloud security best practices, threat detection, incident response, and  ability to develop and maintain security policies and procedures. Collaborate closely with cross-functional teams to ensure the  security, compliance, and resilience of cloud operations including DevOps, IT, and compliance, to ensure security is integrated  throughout the cloud environment. 

Full time employment, Monday – Friday, 40 hours per week. 

MINIMUM REQUIREMENTS: 

Bachelor’s degree or foreign equivalent in Cybersecurity, Computer Science, Information or related field and 5 years of progressive  post-baccalaureate work experience in Cyber Security or related field.  

Of the required experience, must have 4 years of experience in all of the following: 

• Cloud security and architecture using AWS and Microsoft Azure.  
• Working with cloud service models (IaaS, PaaS, SaaS) and deployment models (public, private, hybrid). Cloud security services and tools, including AWS Identity and Access Management (IAM), AWS Security Hub, Azure  Security Center, Azure Privileged Identity Management and other similar cloud native-security capabilities. Scripting and automation using Python, Bash, or PowerShell for security-related tasks.  
• Security compliance frameworks including NIST 800-171, CMMC and CIS.  
• IT controls requirements including Sarbanes-Oxley (SOX). 
• Cloud security assessments and audits as a control owner or implementer, including using tools AuditBoard or Wiz.  DevOps and DevSecOps practices, and tools including Jenkins, Terraform, Ansible, Git, GitHub Actions, GitHub  Enterprise, AWS CodeBuild and CloudFormation.  
• Documenting Standard Operating Procedures (SOPs) for compliance and security purposes. 
• IT processes and controls such as change management, asset management, and configuration management. Telecommuting permitted up to 100%; candidate may reside anywhere in the U.S. 

Domestic travel required up to 20%. 

GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is  conditioned upon the successful completion of a drug screen (as applicable). 

To apply, please email your resume to gea.gms@ge.com and reference the following job ID number in the subject line:  R5038844 Senior Staff Cyber Security Architect