As Product Security Champion, you are responsible for implementing, monitoring, and continuously improving security activities within the software and product development processes at our location. This location develops and supplies high-end machines for the pharmaceutical industry, where cybersecurity, reliability, and compliance are of critical importance. You will play a key role in translating the IEC 62443-4-1 requirements into practical and applicable measures within our existing software processes. You will work closely with software engineering and related departments such as product development and quality assurance. You will be able to independently identify gaps, draw up improvement plans, and guide the organization toward demonstrable compliance. You will work as a member of the software team and be responsible in ensuring that our software product is current with market supply and suitably upgraded to meet the needs of the company, the customer and regulatory requirements.Responsibilities / Tasks<ul><li>Implementation of IEC 62443-4-1 within existing software processes.</li><li>Performing gap analyses and drawing up improvement plans.</li><li>Integrating secure-by-design principles into the SDLC (Software Development Life Cycle).</li><li>Drawing up and managing security documentation such as threat models and secure coding guidelines.</li><li>Working within the software department to implement required security advancements</li><li>Managing the software department in the field of Information Security.</li><li>Collaborating with the Information Security and QA departments.</li><li>Identification of risks in current supply, both security and continued supply of product architecture.</li><li>Development for evolution of product architecture</li><li>Software standards maintenance</li></ul>Your Profile / QualificationsMust-haves:<ul><li>Education and experience in software development processes, engineering, and computer science.</li><li>Knowledge of information security.</li><li>Experience in PLC, HMI and SCADA coding environments.</li><li>Siemens PLC and HMI experience in TIA.</li><li>Detailed SCADA coding experience, preferably GE iFix.</li><li>Experience in product architectural design</li><li>Ability to independently analyse complex issues.</li><li>Experience with process documentation and improvement plans.</li><li>Strong communication skills.</li><li>Proactive, independent, and analytically strong.</li><li>Attention to detail</li><li>Practical and solution oriented.</li><li>Able to switch between technical and organisational tasks.</li></ul>Nice-to-haves:<ul><li>Experience with IEC 62443-4-1 or comparable standards.</li><li>Knowledge of ICS/OT security.</li><li>Knowledge of threat modelling, secure coding, or security tooling.</li><li>Relevant certifications such as ISA/IEC 62443 or CSSLP.</li><li>Rockwell PLC/HMI experience</li></ul>Did we spark your interest? Then please click apply above to access our guided application process.

<div class="org-about-module__description">
<div id="ember59" class="ember-view organization-about-module__content-consistant-cards-description">GEA is one of the largest technology suppliers for food processing and a wide range of other industries. The global group specializes in machinery, plants, as well as process technology and components. GEA provides sustainable solutions for sophisticated production processes in diverse end-user markets and offers a comprehensive service portfolio.</div>
</div>
<div class="org-about-module__content-improvement">
<div class="org-about-module__content-box">&nbsp;</div>
</div>

Product Security & Software Development Engineer

As Product Security Champion, you are responsible for implementing, monitoring, and continuously improving security activities within the software and product development processes at our location. This location develops and supplies high-end machines for the pharmaceutical industry, where cybersecurity, reliability, and compliance are of critical importance. You will play a key role in translating the IEC 62443-4-1 requirements into practical and applicable measures within our existing software processes. You will work closely with software engineering and related departments such as product development and quality assurance. You will be able to independently identify gaps, draw up improvement plans, and guide the organization toward demonstrable compliance. You will work as a member of the software team and be responsible in ensuring that our software product is current with market supply and suitably upgraded to meet the needs of the company, the customer and regulatory requirements.Responsibilities / Tasks<ul><li>Implementation of IEC 62443-4-1 within existing software processes.</li><li>Performing gap analyses and drawing up improvement plans.</li><li>Integrating secure-by-design principles into the SDLC (Software Development Life Cycle).</li><li>Drawing up and managing security documentation such as threat models and secure coding guidelines.</li><li>Working within the software department to implement required security advancements</li><li>Managing the software department in the field of Information Security.</li><li>Collaborating with the Information Security and QA departments.</li><li>Identification of risks in current supply, both security and continued supply of product architecture.</li><li>Development for evolution of product architecture</li><li>Software standards maintenance</li></ul>Your Profile / QualificationsMust-haves:<ul><li>Education and experience in software development processes, engineering, and computer science.</li><li>Knowledge of information security.</li><li>Experience in PLC, HMI and SCADA coding environments.</li><li>Siemens PLC and HMI experience in TIA.</li><li>Detailed SCADA coding experience, preferably GE iFix.</li><li>Experience in product architectural design</li><li>Ability to independently analyse complex issues.</li><li>Experience with process documentation and improvement plans.</li><li>Strong communication skills.</li><li>Proactive, independent, and analytically strong.</li><li>Attention to detail</li><li>Practical and solution oriented.</li><li>Able to switch between technical and organisational tasks.</li></ul>Nice-to-haves:<ul><li>Experience with IEC 62443-4-1 or comparable standards.</li><li>Knowledge of ICS/OT security.</li><li>Knowledge of threat modelling, secure coding, or security tooling.</li><li>Relevant certifications such as ISA/IEC 62443 or CSSLP.</li><li>Rockwell PLC/HMI experience</li></ul>Did we spark your interest? Then please click apply above to access our guided application process.

Product Security & Software Development Engineer

About the Job

About the Company

GEA

Similar Jobs

Global IT Security Expert - OT

Global IT Security Expert - OT

Information Security Analyst

Information Security Analyst

IT Security Analyst

IT Security Analyst

Cyber Security Analyst

Cyber Security Analyst

Cyber Security Software Development Lead Engineer

Cyber Security Software Development Lead Engineer

Engineer IV, Cyber DevSecOps

Engineer IV, Cyber DevSecOps

Cyber Security Operations Engineer

Cyber Security Operations Engineer

Information Security Analyst

Information Security Analyst

Network and Security Engineer 80 - 100% (f/m/d)

Network and Security Engineer 80 - 100% (f/m/d)

Product Security Expert

Product Security Expert