• Lead technical definition and implementation of IEC 61850-based architectures, including data modeling, communication services, and system integration concepts. • Work with Program & Product Management teams to create high-level specifications. • Develop and support real-time controller solutions utilizing design specifications, model-based design which facilitates code generation. • Analyse user specifications / requirements to recommend appropriate solutions. • Analyse industry standards and market trends to build requirements to propose new developments in GE Vernova products. • Work with Customer Support to resolve product, process, and customer issues related to communication protocols. • Assist in preparing training material and deliver training courses, where required. • Provide technical guidance, direction, and training to a new and / or experienced engineers, specialists, technicians, and co-ops when required.

• Building and improving features across the platform, with Python and Django at the core of our stack, while picking up other technologies as the platform and your work demands • Writing well-structured, testable, production-ready code and holding yourself to a high standard of quality • Collaborating with Data Engineering to understand platform capabilities and integrate effectively • Working closely with Product and Design in scrum ceremonies, backlog refinement, and technical discussions, contributing your perspective, not just your code • Participating in production support and incident management, debugging and resolving issues to keep our platform stable and performant • Documenting what you build, clearly and consistently • Helping define and evolve our backend engineering standards, staying current with the Python and Django ecosystem and bringing good ideas back to the team

• Support technical demos with customers, operators, partners, and investors. • Install, configure, test, and troubleshoot demo systems and pilot deployments. • Travel between Bergamo, Zaragoza, and customer sites as needed. • Work with engineering teams to diagnose field issues • Help customers understand technical requirements and deployment steps. • Collect structured feedback from customers and partners. • Create installation guides, troubleshooting guides, FAQs, and customer technical notes. • Support pilot rollouts, hardware testing, software validation, and demo preparation.

• Lead security architecture reviews for new and existing applications, ensuring secure-by-design principles are embedded from initial design through deployment and ongoing operation. • Develop, enforce, and continuously refine secure coding standards across engineering teams through a combination of automated security scans (SAST, DAST, SCA), AI-assisted code review using tools such as Claude Code, periodic manual code audits, and targeted secure development training. • Own the design, implementation, and evolution of Application Security Posture Management (ASPM) capabilities, integrating signals from static analysis, dynamic testing, software composition analysis, and runtime telemetry to build risk-scoring models that balance exploitability, data sensitivity, and business impact. • Continuously improve threat modeling frameworks across application components, third-party integrations, cloud-native architectures, and AI/LLM-powered features, leveraging tools such as Claude Security for accelerated threat model generation and scenario analysis. • Develop custom security automation tools and scripts to improve detection and response capabilities across cloud environments, including AI-assisted vulnerability auto-fix workflows and integration of AI-powered security tooling into CI/CD pipelines. • Own and operate the company’s bug bounty program end-to-end: define program strategy and scope, triage and validate external researcher submissions, assess severity, and maintain productive engagement with the security research community. • Manage vulnerability triage and prioritization processes, ensuring vulnerabilities are assessed based on exploitability, business impact, and compliance requirements, and that remediation timelines align with organizational risk tolerance.