דרושים Product Security Representative ב-Ge Healthcare ב-Hungary, Budapest

Main duties:

• conducting tests and scans to identify any vulnerabilities
• analyzing, identifying the security threats, vulnerabilities and driving vulnerability assessment in the products
• understanding threat impact in product on technical level, summarize to others and bring up a possible solution, mitigation plan
• handling security related administrative tasks such as reporting or document preparation for releases
• support Penetration Testing activities
• reviewing, classifying and evaluating all risks, defects which is related to product, handling threat models
• ensuring documentation integrity and quality for the program area
• share knowledge and best practices within team, increase the security awareness in development teams by presenting new trends, best practices

Qualifications:

• Bachelor’s Degree in Computer Science or in “STEM” Majors (Science, Technology, Engineering and Math)
• Experience in software development or tool/service development (3 years of relevant work experience)
• Has the ability and experience to analyze and evaluate impact of changes, defects, threats, vulnerabilities on product level and bring up a mitigation plan
• Good knowledge of Linux system, Windows is a plus
• Experience in languages/tools such as Java, Python, Go (at least min one)
• Skilled in breaking down problems and documenting problem statements
• Knowledge of the cyber security trends and hacker tactics
• Excellent verbal and written communication skills in English

Characteristics:

• Open to challenges and complex problems
• Has positive, proactive attitude
• Team player
• Passionate about security and software development technologies
• System/high level and out of the box thinking
• Demonstrates clarity of thinking to work through limited information and vague problem definitions
• Strong interpersonal skills, excellent communication
• Able to work under minimal supervision and open to collaboration

LI-HYBRID
LI-AO1

Main duties:

• managing product security related priorities, deadlines, projects and obstacles

• introduce new policy changes, harmonize best practices

• driving and managing product release related security activities like technical challenges/discussion/reviews/alignments with development teams, stakeholders or 3rd parties

• delivering product release security documents, document cyber security status and process in accordance with regulations

• support the development teams by security analyses and threat modelling

• analyzing, tracking and following product related threat, vulnerabilities, security gaps and desired solution

• maintain cybersecurity processes, monitoring systems/tools

• works independently and proactively

• share knowledge and best practices within team

• interact with worldwide engineering and product teams (US, France, India)

Qualifications:

• Bachelor’s Degree in Computer Science or in “STEM” Majors (Science, Technology, Engineering and Math)

• Experience analyzing/detecting and remediating cybersecurity product issues

• Product security knowledge and mindset (vulnerabilities, CVE tracking, security gap analysis)

• Experience in security/network/system administration/development or equivalent knowledge

• Good knowledge of Linux system, Windows is a plus

• Experience in a complex development

• Has the ability to analyze and evaluate impact of changes, defects and different technology choices

• Excellent verbal and written communication skills in English

Characteristics:

• Demonstrates clarity of thinking to work through limited information and vague problem definitions

• Influences through others; builds direct and "behind the scenes" support for changes

• Proactively identifies, facilitates and drives project obstacles or barriers on behalf of the team

• Strong interpersonal skills, excellent communication skills and the ability to interface with senior leadership with confidence and clarity

• Able to work under minimal supervision and open to collaboration

• Open to challenges and complex problems

• Has positive, proactive attitude

Practical hands-on experience cybersecurity events investigation tracking and threat resolution.LI-HYBRID
LI-AO1

Main duties:

• driving and managing product release related security activities like technical challenges/discussion/reviews/alignments with development teams, stakeholders or 3rd parties
• delivering product release security documents, document cyber security status and process in accordance with regulations
• support the development teams by security analyses and threat modelling
• analyzing, tracking and following product related threat, vulnerabilities, security gaps and desired solution
• maintain cybersecurity processes, monitoring systems/tools
• works independently and proactively
• share knowledge and best practices within team
• interact with worldwide engineering and product teams (US, France, India)

Qualifications:

• Bachelor’s Degree in Computer Science or in “STEM” Majors (Science, Technology, Engineering and Math)
• Experience analyzing/detecting and remediating cybersecurity issues
• Experience in security/network/system administration/development or equivalent knowledge
• In-depth knowledge of various operating systems (Linux, Windows)
• Practical hand-on experience in a complex system development
• Product security knowledge and mindset (Vulnerabilities, CVE tracking, security gap analysis)
• Has the ability to analyze and evaluate impact of changes, defects and different technology choices
• Good English skills

Characteristics:

• Demonstrates clarity of thinking to work through limited information and vague problem definitions
• Influences through others; builds direct and "behind the scenes" support for changes
• Proactively identifies, facilitates and drives project obstacles or barriers on behalf of the team
• Strong interpersonal skills, excellent communication skills and the ability to interface with senior leadership with confidence and clarity
• Able to work under minimal supervision and open to collaboration
• Practical hands-on experience cybersecurity events investigation tracking and threat resolution