Sr. Staff Cyber Security Architect

Job Description SummaryLooking for a new challenge in the Aerospace industry? Join our Application Security team, where you’ll partner with fellow cybersecurity architects and engineers as we secure GE systems and partner with the software engineering organization to implement secure development practices and defensive cyber controls. Apply today!Job DescriptionResponsibilities:This is a senior-level role that requires applicants to possess an understanding of secure development practices and tools, hands-on experience writing enterprise software in agile environments, knowledge of system architecture and design, and a strong understanding of software security. The selected candidate would have some of the following duties:Conduct risk assessments on new software products and evaluate system architecture and designConduct code reviews, and drive threat modeling exercisesProvide subject matter expertise on software security tools and controls such as SAST, DAST, SCA, Infrastructure-as-Code, and container scanningSupport the rollout and operationalization of new tools and capabilitiesPartner with development teams, leaders, and product lines to provide consultative cybersecurity guidance, insight, and feedback as new technologies or products are developedContribute to the development of strategic team and organizational objectivesDevelop and enforce application security policies, standards, and controlsEngineer automation scripts utilizing Python, JSON, APIs, and cloud-native servicesPresent findings, concepts, ideas, and plans in support of key cyber objectives to various parts of the business, as neededMentor junior team membersQualifications/Requirements:Bachelor’s degree from accredited university or college with minimum of 6 years of professional experience OR Associates degree with minimum of 9 years of professional experience OR High School Diploma with minimum of 11 years of professional experienceMinimum 5 years of professional experience in Cyber Security Architecture or ITNote: Military experience is equivalent to professional experienceEligibility RequirementsLegal authorization to work in the U.S. is required.  We will not sponsor individuals for employment visas, now or in the future, for this job.Desired Characteristics:Bachelor's Degree in Computer Science or a STEM major (Science, Technology, Engineering, or Math)Prior experience in Application Security or as a senior software architect, or solutions architectSolid grasp of any of the following: OWASP Top 10 or ASVS, SANS SWAT, CIS Top 18Prior hands-on experience utilizing SAST, DAST and SCA technologiesExperience with Secrets scanning and managementStrong grasp of web application architecture, design and secure web configurationsExperience with container technologies (registry services, Docker, EKS, ECS, AKS, etc.)Knowledge of CI/CD and orchestration tools and previous experience integrating security tooling into DevOps pipelinesKnowledge of or experience with IaC scanning technologies such as CheckovExperience with GitHub and supporting modules like Advanced SecurityExperience with any of the following regulatory frameworks:  NIST 800-53, NIST 800-171, CMMC, DFARS, ISO 27001/27002Experience conducting Web Application Penetration Tests or vulnerability assessmentsPossess any of the following certifications: CISSP, OSCP, GWAPT, GPEN, GXPEN, CEH or otherPossess an AWS or Azure certificationStrong understanding of Web Application Firewalls (WAF)General understanding of Identity management and federation (SAML, OAuth, etc.)Experience developing, architecting, or evaluating cloud-based applicationsKnows the latest evolving technologies via formal training or proactive educationPay Transparency:The salary range for this posting is $127,900.00 - $213,200.00 USD Annual. The specific salary offered to a candidate may be influenced by a variety of factors including the candidate’s experience, their education, and the work location. In addition, this position Is eligible for a performance bonus/variable incentive plan.GE provides a comprehensive benefits package that provides access to plans which support the overall wellbeing of our employees and their dependents. These benefits include, but are not limited to, healthcare coverage (medical, dental, vision, and pharmacy), a retirement plan that includes company retirement savings and 401K with company matching, life insurance options, disability coverage, paid time off, EAP, and more.This role is restricted to U.S. persons (i.e., U.S. citizens, permanent residents, and other protected individuals under the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)) due to access to export-controlled technology. GE will require proof of status prior to employment.Additional InformationGE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable). Relocation Assistance Provided: No#LI-Remote - This is a remote positionJob SummaryJob number: R3720168Date posted : 2023-09-19Profession: Digital Technology / ITEmployment type: Senior Level