Incident Support Security Analyst

Description

In recent years, GM Information Technology has successfully executed the largest IT transformation in the history of the automotive industry, fully insourcing what once was a nearly completely outsourced IT function. Today GM IT is a dynamic and fast paced organization that designs, develops and maintains all IT infrastructure, applications and solutions enabling GM’s global operations. From designing and building the next generation of electric and other vehicles to developing a world-class GM experience for our dealers and customers, GM IT is driving real change in the most iconic automaker on the planet. Our team delivers unique enterprise-wide IT solutions in cutting-edge technologies such as mobility, telematics, mission-critical business systems, supercomputing, cloud, vehicle engineering and real-time computing. We offer challenging positions for passionate professionals looking to advance their careers and be a part of an IT organization focused on innovation, speed and business value.

Hybrid:  This position does not require an employee to be on-site full-time to perform most effectively. The employee’s role enables them to work at a GM facility or off-site as frequently as needed or desired. This position requires an employee to be onsite 1-3 times per week .

Location: Detroit, MI or Austin, TX

At General Motors the Security Analyst is a technical position responsible for supporting the definition and implementation of GM Cyber Security technology direction, standards and technology roadmaps across business and technical domains.

The Third-Party Cybersecurity Incident Analyst will orchestrate the incident response activities when GM is notified of a potential cyber event at a third party. This role will work cross functionally with other GM Cybersecurity and IT teams, and business partners, to quickly assess the validity of the notification and the potential exposures to GM.

The Third-Party Cybersecurity Incident Analyst will work collaboratively with the Cyber Intelligence and Cyber Defense teams to determine the nature of the attack, containment status, and potential impacts to GM such as loss or exposure of GM Information, disruptions to business and/or manufacturing operations, supply chain availability, product integrity and safety.

This assignment requires originality, ingenuity, and a wider application of principles, theories, and concepts.

• You will be providing solutions for security problems that are broad and may be only vaguely defined and require understanding and consideration of one or more security functions
• You will also be responsible for coordinating and delivering small to medium projects.
• Provides advice with some requirement to influence within context of shared objectives.
• Expected to influence without direct control.
• As with all roles within General Motors the ideal candidate will always hold themselves and others accountable for demonstrating GMs values and cultural behaviors. Models GM behaviors and creates a winning culture

Additional Description

Major Duties / Responsibilities:

• Follow detailed operational processes and procedures to appropriately triage, analyze, and escalate critical information security events
• Research various security events using own knowledge, research tools, and threat intelligence to determine impacts, urgency, and containment actions
• Orchestrate enterprise wide investigation efforts of third-party cyber events, and ensure all cyber events are recorded and tracked to completion
• Lead the coordination of efforts with Cyber Defense, Legal, Purchasing, and relevant stakeholders, and ensure communication protocols are followed
• Engage with the affected supplier to understand the series of events leading to the cyber incident, containment efforts and remediation plans
• Provide on-call / off hours support
• Create and maintain meaningful metrics on third-party investigations and assist in the creation of various reports used for executive communication

• Interact with senior leaders, business partners, and / or vendors
• Work with independence, under minimal direction, and sometimes stressful situations
• Model GM Values and Behaviors and create a winning culture
• Perform other related duties as assigned

Minimum qualifications:

• Bachelor’s degree in Information Systems, Information Security, Computer Science, or relevant work experience
• 3+ years working within the information security field, with emphasis on security operations, incident management, intrusion detection, and/or security event analysis
• Operates with the highest level of integrity in dealing with confidential and sensitive information
• Knowledge of best practices for cyber incident detection, investigation, and response
• Ability to triage and coordinate cyber event activities and response
• Excellent writing and verbal communication skills
• Ability to translate technical findings into business risk
• Investigative mind to drive the conversation on a cyber event and get to the root cause
• Detail oriented, organized, methodical, follow up skills with an analytical thought process
• Great customer service skills

Preferred qualifications:

• Security industry certifications are a plus, e.g. CISSP, GCIA
• 5+ years’ experience in security monitoring, security operations, or incident response
• Knowledge of application, network and operating system security controls
• Understanding the autonomy of an attack and attack vectors
• Understanding of vulnerabilities and patching processes
• Understanding of the industry recommended security controls

About GM

Our vision is a world with Zero Crashes, Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better, safer and more equitable for all.

Why Join Us

We aspire to be the most inclusive company in the world. We believe we all must make a choice every day – individually and collectively – to drive meaningful change through our words, our deeds and our culture. Our Work Appropriately philosophy supports our foundation of inclusion and provides employees the flexibility to work where they can have the greatest impact on achieving our goals, dependent on role needs. Every day, we want every employee, no matter their background, ethnicity, preferences, or location, to feel they belong to one General Motors team.

Benefits Overview

The goal of the General Motors total rewards program is to support the health and well-being of you and your family. Our comprehensive compensation plan incudes, the following benefits, in addition to many others:
• Paid time off including vacation days, holidays, and parental leave for mothers, fathers and adoptive parents;
• Healthcare (including a triple tax advantaged health savings account and wellness incentive), dental, vision and life insurance plans to cover you and your family;
• Company and matching contributions to 401K savings plan to help you save for retirement;
• Global recognition program for peers and leaders to recognize and be recognized for results and behaviors that reflect our company values;
• Tuition assistance and student loan refinancing;
• Discount on GM vehicles for you, your family and friends.

Diversity Information

General Motors is committed to being a workplace that is not only free of discrimination, but one that genuinely fosters inclusion and belonging. We strongly believe that workforce diversity creates an environment in which our employees can thrive and develop better products for our customers. We understand and embrace the variety through which people gain experiences whether through professional, personal, educational, or volunteer opportunities. GM is proud to be an equal opportunity employer.

Equal Employment Opportunity Statements

The policy of General Motors is to extend opportunities to qualified applicants and employees on an equal basis regardless of an individual’s age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity/expression or veteran status. Additionally, General Motors is committed to being an Equal Employment Opportunity (EEO) Employer and offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment, email us at [email protected] . In your email, please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.

JR-000071207