• Develop high-level C# Desktop Applications for user interaction; • Build low-level, hardened C/C++ code for Linux (Yocto) and RTOS; • Design and maintain secure C/C++ applications across Windows (Visual Studio), Linux (Eclipse), and RTOS; • Develop robust C#/.NET desktop applications (WPF/WinForms); • Build and secure Yocto-based Linux distributions; • Design firmware for RTOS with a focus on memory protection; • Integrate security controls such as encryption (AES, RSA); • Ensure seamless and secure communication between C# high-level applications and low-level embedded targets.

• Lead key product cyber security programs from inception through completion, ensuring alignment with key stakeholders, business priorities, regulatory requirements, and product roadmaps. • Assess current product security posture against applicable regulatory requirements, identify gaps, and develop structured remediation plans and roadmaps. • Lead the effort to achieve and/or maintain standards-based certification for the product security program and/or specific Wind products. • Manage audit preparation activities, including coordination with internal auditors and third-party certification bodies, evidence collection, and providing responses to findings. • Support and/or drive the development, maintenance, and usage of internal tools for product security, such as the product asset inventory, vulnerability management automation. • Design, develop, and support OT/ICS cybersecurity solutions for wind farm, such as SIEM detection rules, endpoint protection (EDR/AV/application whitelisting), and network segmentation, based on customer requests, regulatory requirements, and commercial strategy. • Design, develop, and implement cyber security solutions and controls, collaborating with cross functional teams, that address identified risks, vulnerabilities, and gaps across Wind’s products, systems, and processes. • Lead root cause analysis efforts for security vulnerabilities and non-conformities, delivering findings and actionable recommendations. • Support incident response activities related to product security vulnerabilities.

• Lead cybersecurity due diligence for acquisitions, divestitures, carve-outs, joint ventures, minority investments, and other strategic transactions across GE Vernova’s global portfolio. • Serve as a primary cybersecurity lead across the transaction lifecycle, from early-stage diligence and pre-sign assessments through closing, Day 1 readiness, and 30/60/100-day execution. • Represent the Cyber function holistically in M&A activities, while assessing risks and ensuring alignment with GE Vernova cybersecurity standards, controls, playbooks, and strategic priorities. • Lead cyber diligence activities aligned to recognized frameworks and standards, including NIST CSF, NIST SP 800-53, NIST SP 800-171, and NIST SP 800-82, while applying GE Vernova cybersecurity practices and expectations. • Quantify cyber risk and remediation requirements and translate findings into business terms, including transaction risk, remediation investment, Day 1 requirements, TSA needs, and post-close priorities. • Drive Day 1 cybersecurity readiness, including minimum control requirements, risk-based exceptions, interim safeguards, and stabilization planning. • Build and execute 30/60/100-day cybersecurity integration or separation plans and support long-term roadmap development. • Develop and maintain repeatable playbooks, templates, and standards for cyber diligence, integration, separation, and post-close execution. • Lead safe, practical strategies for OT/ICS integration and separation, including segmentation, cyber resilience, and operational continuity considerations. • Establish secure data-sharing, clean-room, and transaction confidentiality protocols in partnership with Legal, Privacy, and other stakeholders. • Partner closely with Digital Technology M&A/PMO, Business Development, Legal, Privacy, Finance, Insurance, Sourcing, business leaders, and cybersecurity teams across GE Vernova. • Lead and manage external cybersecurity advisors and service providers supporting diligence, testing, regulatory advisory, and execution activities. • Prepare executive-ready cyber risk summaries, decision materials, and recommendations for senior stakeholders. • Track and report key performance indicators related to diligence quality, execution speed, Day 1 readiness, TSA reduction, and post-close remediation progress. • Help define and advance AI use cases for cybersecurity M&A, including opportunities to improve diligence efficiency, risk analysis, control mapping, remediation prioritization, and integration planning, in alignment with GE Vernova governance and responsible AI requirements.

• As an experienced Cyber Security Content Developer, you excel at designing and maintaining content for seemingly complicated topics such as SIEM, UEBA, SOAR, data ingestion, enrichment, and incident response concepts for a wide-ranging audience and course duration. • Using the best instructional design techniques resulting in engaging and quality self-paced, micro-learning content. • As a Cyber Security hero, you connect with internal employees, customers, and partners to understand their challenges. • You also have a passion for sharing real-world solutions to these challenges. • C urating a list of sources of information that keep you up to date on the latest cyber industry news, brainstorming creative solutions to solve problems. • Lead the maintenance and design of infrastructure and tooling to facilitate self-paced content and deliver the best instructor-led training (ILT) possible, constantly looking for ways to optimize the trainee’s experience. • Cultivating relationships with internal teams such as Product Management, Engineering, Support, and Sales to provide more effective means of collaboration and help achieve shared goals.