Sr. Staff Security Architect at GE Vernova

Job description

Job Description Summary GE Vernova is seeking a Sr Staff Cyber Security Architect to ensure that our application and infrastructure architecture is secure. In this role, you will conduct security architecture reviews for cloud and on-premise systems, helping ensure solutions are secure by design and aligned to GEV security requirements. The ideal candidate brings cybersecurity architecture experience, a strong commitment to service excellence, and a passion for protecting and shaping the future of energy. Job Description Responsibilities Include: Security Architecture and Governance Serve as a security architect for AWS and Azure application and infrastructure deployments. Conduct security architecture reviews and risk assessments within the enterprise architecture domain governance model. Draft target system architectures that follow secure-by-design principles and security best practices. Define secure-by-design architectures for AI applications and AI agents, including identity, data access, model and tool integration, runtime controls, and human oversight. Conduct security reviews for generative AI solutions, agentic workflows, and supporting platforms across cloud and on-premise environments. Risk, Documentation, and Reusable Guidance Draft and publish risk assessment reports that clearly outline cyber risks and mitigating controls. Publish reusable solution patterns to improve clarity, consistency, and alignment across designs. Develop security-related documentation, including policies, standards, and leading practices. Develop reusable security patterns and risk guidance for AI applications and agents, including prompt and data protection, model supply chain, agent identity and permissions, monitoring, and lifecycle governance. Technical Leadership and Collaboration Research emerging technologies, industry developments, and market trends to support enterprise project delivery and operations. Serve as a technical leader within the function by staying current on industry technology and security trends. Build peer, cross-functional, and cross-business relationships to share best practices and improve team effectiveness. Influence across the function and business while working collaboratively as part of the broader security architecture team. Basic Qualifications: Education: Bachelor’s degree in Information Systems, Information Technology, Computer Science, Cybersecurity, Computer Engineering, or a related field from an accredited college or university. Professional Experience: At least 8 years of experience in enterprise IT and/or cybersecurity. Cybersecurity Architecture: At least 3 years of experience in cybersecurity architecture. Desired Characteristics: Cybersecurity Architecture and Technical Expertise Experience in cybersecurity architecture, including designing secure solutions in AWS, Azure & GCP. Experience with threat modeling, multi-tier web applications, and relevant security standards. Experience assessing and securing AI and generative AI applications, including large language model integrations, retrieval-augmented generation, APIs, and agentic systems. Knowledge of AI security risks and controls, including prompt injection, sensitive data exposure, insecure tool use, excessive agency, model and dependency risks, and AI agent identity and access governance. Industry-recognized security certification, such as CISSP, CCSP, AWS Security, or Azure Security certification. Collaboration and Influence Experience partnering with solution architects to design secure systems. Strong communication and interpersonal skills, with the ability to work independently and as part of a team. Ability to influence, build consensus, and align stakeholders across Digital Technology teams and leadership. Problem Solving and Adaptability Strong analytical and problem-solving skills. Comfortable working in new areas that require rapid learning, sound judgment, and continuous improvement. Ability to synthesize input from multiple sta