GE HealthCare in Horten is looking for a Cyber Security Analyst and Designer

As a Cyber Security Analyst and Designer, you’ll be responsible for the privacy and cyber security capabilities of ultrasound products made by GE Vingmed Ultrasound AS.

Your responsibilities will be in the areas of embedded medical ultrasound systems, cloud solutions, desktop applications, platforms and integrating applications to Hospital IT systems and other 3rd party systems.

You’ll be analyzing existing products and the design of future products, do vulnerability assessments, plan, design and implement short term mitigations and long-term solutions for the future.

You’ll be ensuring strong and adequate privacy and cyber security capabilities for the full lifecycle of the products, to the benefit of our customers, the users, and the patients.

You’ll be working independently, but you’ll also be working close with other teams and colleagues in the local and global GE HealthCare organization.

In this role you will:

• Take responsibility of the privacy and cyber security capabilities of one or more products made by GE Vingmed Ultrasound.
• Do privacy and security risk assessments.
• Do cyber security threat modelling.
• Specify short term mitigations.
• Make long term roadmaps to ensure the products are protected and prepared for the current and future threats.
• Define product requirements.
• Perform security testing and organize external security testing.
• Aligning with stakeholders, such as product managers, project managers, service organization, regulatory assurance, quality assurance etc.
• Cooperate and share knowledge and experience with relevant teams and colleagues in the GE HealthCare organization.
• Support service and sales with security domain knowledge.
• Stay current with privacy and cyber security trends, technology, risk, vulnerabilities, and threat landscape.
• Have an overview of applicable regulatory requirements.
• Provide technical leadership when needed.
• Work with Product Managers to understand product requirements & vision.
• Work cross functionally with other business departments to align activities and deliverables.
• Drive world-class quality in the development and support of products.
• Apply principles of SDLC and methodologies like Lean/Agile/XP, CI, Software and Product Security, Scalability, Documentation Practices, refactoring, and Testing Techniques.

We seek candidates holding a degree within cyber security / computer science / software engineering or other relevant discipline. We are looking for candidates with experience within the following areas:

• Privacy and security risk assessments
• Threat modelling
• Vulnerability assessments
• Penetration testing
• Static and dynamic security testing
• Windows security
• Cloud security
• Crypto libraries
• Data privacy

Other useful qualifications for this role:

• Risk management
• Regulatory requirement for Cyber Security and Data Privacy
• Software projects in the Healthcare domain
• Network security
• Security certifications like CISSP, CISM or similar
• Windows based programming
• Development and security of cloud solutions
• DICOM standard
• Programming in C#.NET and/or C++
• Client/Server architecture
• SQL Databases
• Test-driven development and Agile methodology
• Software architecture and SOLID design principles

Business Acumen:

• Skilled in breaking down problems, documenting problem statements and estimating efforts.
• Demonstrates awareness about competitors and industry trends.
• Has the ability to analyze impact of technology choices.
• Demonstrates the initiative to explore alternate technology and approaches to solving problems.
•  

Leadership:

• Ability to takes ownership of small and medium sized tasks and deliver while mentoring and helping team members.
• Ensures understanding of issues and presents clear rationale. Able to speak to mutual needs and win-win solutions. Uses two-way communication to influence outcomes and ongoing results.
• Identifies misalignments with goals, objectives, and work direction against the organizational strategy. Makes suggestions to course correct.
• Continuously measures deliverables of self and team against scheduled commitments. Effectively balances different, competing objectives.

Personal Attributes:

• Analytic skills and the ability of obtaining technical understanding of a complicated technical issue.
• Strong oral and written communication skills.
• Effective problem-solving abilities.
• Persists to completion, especially in the face of overwhelming odds and setbacks. Pushes self for results; pushes others for results through team spirit.

Being a flexible organization, we encourage both experienced and less experienced candidates to apply.