Product Security Representative (PSR) - AI COE
Job Description Summary
We are seeking a Product Security Representative (PSR) to lead and coordinate product cybersecurity activities across the AI Center of Excellence (AI COE). The PSR will partner with Software Engineering, Machine Learning, Architecture, Software Quality, Regulatory, and GE HealthCare Product Security teams to ensure cybersecurity requirements and risks are appropriately addressed throughout the product lifecycle.The role will coordinate security assessments, risk management, vulnerability activities, and required cybersecurity documentation while helping establish consistent and reusable security practices across AI/ML products and software components.
Job Description
Key Responsibilities
- Serve as the Product Security Representative and primary product cybersecurity point of contact for assigned AI COE products and programs.
- Partner with engineering, ML, architecture, quality, regulatory, and Product Security teams to integrate cybersecurity requirements into product development and releases.
- Coordinate cybersecurity assessments, threat modeling, security risk assessments, findings, and mitigation activities.
- Ensure required product cybersecurity documentation and records are created and maintained throughout the product lifecycle.
- Support vulnerability management, SBOM and third-party software security activities, including assessment and documentation of identified risks.
- Maintain applicable product-security information in eSG and coordinate supporting information with program teams.
- Establish consistent and reusable cybersecurity practices and artifacts across AI COE software and AI/ML releases.
Qualifications
- Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, Biomedical Engineering, or a related technical field.
- 4+ years experience in product cybersecurity, software engineering, systems engineering, or cybersecurity engineering.
- Knowledge of software security, vulnerability management, threat modeling, cybersecurity risk assessment, and security requirements.
- Ability to understand software architectures, interfaces, dependencies, and data flows from a cybersecurity perspective.
- Strong technical communication, documentation, collaboration, and problem-solving skills.
Preferred Qualifications
- Experience with medical devices, healthcare products, or another regulated industry.
- Knowledge of QMS, design controls, software lifecycle processes, and medical-device cybersecurity requirements.
- Experience with SBOMs, third-party/open-source software, vulnerability assessment, and cybersecurity documentation.
- Experience with AI/ML products and associated cybersecurity considerations.
- Previous experience working as a Product Security Representative or with GE HealthCare Product Security processes.
What Success Looks Like
- Establishes clear ownership and execution of PSR responsibilities across AI COE programs.
- Ensures cybersecurity risks, assessments, mitigations, and required documentation are addressed throughout development and release.
- Identifies cybersecurity risks early and works effectively with engineering and Product Security teams to resolve them.
- Establishes repeatable security processes and reusable artifacts across AI COE products.
- Builds strong partnerships across Engineering, ML, Quality, Regulatory, Architecture, and Product Security.
- Enables the AI COE to scale development while maintaining disciplined, traceable, and compliant product cybersecurity practices.
Additional Information
GE HealthCare offers a great work environment, professional development, challenging careers, and competitive compensation. GE HealthCare is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
GE HealthCare will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).
While GE HealthCare does not currently require U.S. employees to be vaccinated against COVID-19, some GE HealthCare customers have vaccination mandates that may apply to certain GE HealthCare employees.
Relocation Assistance Provided: No
Required Languages
🇬🇧 English