Staff Product Security Engineer
Read straight from GE HealthCare's careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationIND19-01-Bengaluru-EPIP 122 (Phase II)
Work modeon-site
Typefull-time
SeniorityLead
Experience10+ yrs
Company size10,000+ people
PostedNov 2, 2026 · 3d ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
Bachelor’s degree in engineering
10+ years of development and security experience which includes application security, device security, network security, OS security and Cloud Security
Experience in Rest Api, Kubernetes and container security assessments
Product/Information security experience in all phases of service/product development and deployment including architecture, design, development, testing and deployment
Good understanding of AWS services, specifically related to security
Experience in designing security solutions
Hands-on experience in execution and review of Static & Dynamic Code Analysis reports and ability to discuss with development teams for true positives
Experience and knowledge of penetration testing methodologies and tools
Conducting information security analyses, audits, and reviews
Willingness to learn new technologies and work on security for varied products
Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders
Sound security engineering knowledge (technical) so as to work collaboratively with the Tech Leads and software/products architects to ensure secure products
Knowledge of information system architecture and security controls (e.g., firewall, specialized appliances)
Sound understanding of Cryptography, various Encryption Algorithms, Public key Infrastructure (PKI) and Certificate Authority (CA), OAUTH authentication, 2FA
AWS Solution Architect – Associate along with AWS Security Specialty certification
Experience of Information security assessment in healthcare sector
Experience with NIST 800-53, CIS/STIG benchmark audit
Ideal candidate would have worked on the software development initially and then graduated in to either -S/W Lead/security assessments ensuring security in the product design
Exposure to privacy requirements
Understanding of HI-TRUST and SOC2
Excellent Cyber Security capabilities
Strong knowledge of secure software development lifecycle and practices such as threat modelling, security reviews, penetration tests, and security incident response
Understanding of security by design principles and architecture level security concepts
Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
Ability to relate cyber security incidents from cross-industries
Good to have security certifications like OSCP/CCSP/CISSP
Skills
Rest API
Kubernetes
AWS
cryptography
PKI
PKI Certificate Authority
OAUTH authentication
2FA
NIST 800-53
CIS/STIG
HI-TRUST
SOC2
firewall
specialized appliances
Job Description Summary
As a Staff Product Security Engineer, you will be part of the AIS Digital team with the vision of building and sustaining product competencies and customer orientation to provide timely patient care. We are looking for a person with strong technical acumen in Cyber security in the cloud and preferably a person who has knowledge / expertise in device security and traditional hospital on-premises architectures. He/she will provide Leadership on Cyber security by working both with the product teams and the Global teams and helps to draw out the strategy for AIS Digital products.
About the company
GE Healthcare is a leading global medical technology and digital solutions innovator. Our mission is to improve lives in the moments that matter. Unlock your ambition, turn ideas into world-changing realities, and join an organization where every voice makes a difference, and every difference builds a healthier world.
Job Description
Key Responsibilities:
•
Assess the security for software/Product architecture – guide the product architects to ensure security is built into at the design level itself.
•
Own development of cyber security artifacts including threat model and lead discussion on identifying mitigations.
•
Assist the Engineering teams in triaging and identification of fix for detected product vulnerabilities.
•
Interact with internal / external team to co-ordinate security and privacy assessments which includes VAPT to determine compliance and security posture.
•
Assist business units in the development and implementation of product security and Privacy practices including policies, standards, guidelines, and procedures.
•
Verify that security and privacy requirements defined in the security plans, policies, and procedures are followed and protection measures are functioning as intended.
•
Guide the business unit in their management of the resolution of security audit or review findings.
•
Provide security risk management and security advice as well as advice on strategic direction relating to product and information security.
•
Assist with security incidents and review risk and impact of breaches to protected systems.
•
Review proposed services, engineering changes, and feature requests for security implications and needed security controls.
Qualifications/Requirements:
•
Bachelor’s degree in engineering
•
Should have 10+ years of development and security experience which includes application security, device security, network security, OS security and Cloud Security.
•
Experience in Rest Api, Kubernetes and container security assessments.
•
Product/Information security experience in all phases of service/product development and deployment including architecture, design, development, testing and deployment.
•
Good understanding of AWS services, specifically related to security.
•
Experience in designing security solutions.
•
Hands-on experience in execution and review of Static & Dynamic Code Analysis reports and ability to discuss with development teams for true positives.
•
Experience and knowledge of penetration testing methodologies and tools.
•
Conducting information security analyses, audits, and reviews
•
Willingness to learn new technologies and work on security for varied products.
•
Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders
•
Sound security engineering knowledge (technical) so as to work collaboratively with the Tech Leads and software/products architects to ensure secure products.
•
Knowledge of information system architecture and security controls (e.g., firewall, specialized appliances)
•
Sound understanding of Cryptography, various Encryption Algorithms, Public key Infrastructure (PKI) and Certificate Authority (CA), OAUTH authentication, 2FA
Desired Characteristics:
•
AWS Solution Architect – Associate along with AWS Security Specialty certification.
•
Experience of Information security assessment in healthcare sector.
•
Experience with NIST 800-53, CIS/STIG benchmark audit.
•
Ideal candidate would have worked on the software development initially and then graduated in to either -S/W Lead/security assessments ensuring security in the product design.
•
Exposure to privacy requirements
•
Understanding of HI-TRUST and SOC2.
•
Excellent Cyber Security capabilities
•
Strong knowledge of secure software development lifecycle and practices such as threat modelling, security reviews, penetration tests, and security incident response
•
Understanding of security by design principles and architecture level security concepts
•
Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
•
Ability to relate cyber security incidents from cross-industries.
•
Good to have security certifications like OSCP/CCSP/CISSP