Senior Cybersecurity Incident Analyst

GM•Warren, MI

4d•Hybrid

About The Position

As a Senior Cyber Detection Incident Analyst, you will play a critical role in protecting General Motors' global enterprise by identifying, analyzing, and helping mitigate advanced cyber threats across cloud, identity, endpoint, network, application, and manufacturing ecosystems. You will serve as a senior technical leader within the Cyber Detection organization, driving detection engineering initiatives, leading complex investigations, and continuously improving the technologies, analytics, and processes used to identify malicious activity. This role combines deep technical expertise, threat-focused analysis, and cross-functional collaboration to enhance GM's overall cybersecurity posture. The ideal candidate possesses a passion for cyber defense, strong analytical and investigative skills, and experience developing scalable detection capabilities across modern enterprise environments.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related technical field, or equivalent practical experience
5+ years of experience in cybersecurity with a focus on detection engineering, security operations, incident response, threat hunting, intrusion detection, or security event analysis
Experience working with enterprise SIEM platforms and log-centric detection methodologies
Experience developing and tuning security detections using correlation logic, behavioral analytics, and threat intelligence
Strong understanding of endpoint security technologies and EDR platforms
Experience investigating security events across endpoint, network, cloud, identity, and application environments
Knowledge of attacker tactics, techniques, and procedures (TTPs) and familiarity with the MITRE ATT&CK framework
Experience using scripting and query languages such as Python, PowerShell, or similar technologies
Strong analytical, troubleshooting, and investigative skills
Experience communicating technical findings to both technical and non-technical audiences
Ability to lead investigations during cybersecurity incidents
Demonstrated ability to collaborate effectively across multiple teams and stakeholders
Ability and willingness to participate in a 24x7 on-call rotation

Nice To Haves

Experience with cloud security monitoring and detection engineering in Azure, AWS, and GCP environments
Experience with SaaS security monitoring and identity threat detection
Experience with network security monitoring, IDS/IPS technologies, packet analysis, and network telemetry
Experience supporting manufacturing, operational technology (OT), or industrial control system environments
Experience with vehicle cybersecurity, automotive architectures, or embedded security telemetry
Experience with application security monitoring, API security, runtime protection, and CI/CD security telemetry
Experience with malware analysis, reverse engineering, or digital forensics
Experience developing SOAR workflows and security automation solutions
Security certifications such as GCIA, GCIH, GCFA, GCDA, AWS Security Specialty, or equivalent
Proven ability to mentor, coach, and develop cybersecurity professionals
Demonstrated success leading technical initiatives and influencing cybersecurity strategy
Strong written and verbal communication skills
Continuous learning mindset with a passion for innovation and cybersecurity excellence

Responsibilities

Lead advanced investigations involving complex security incidents, emerging threats, and high-severity escalations
Develop, implement, and optimize detection logic across SIEM, EDR, NDR, SOAR, cloud-native security platforms, and other security monitoring technologies
Conduct threat hunting activities to proactively identify adversary behaviors, attack techniques, and detection gaps
Apply threat intelligence, adversary tradecraft, and MITRE ATT&CK methodologies to improve detection coverage effectiveness
Design, tune, and validate analytics to reduce false positives and improve alert fidelity
Develop automation, enrichment workflows, and operational efficiencies using AI, scripting and security orchestration technologies
Partner with Incident Response, Threat Intelligence, Cloud Security, Product Security, Manufacturing Security, and other cybersecurity teams to improve detection capabilities
Mentor and provide technical guidance to analysts and detection engineers
Drive continuous improvement initiatives that increase visibility, reduce investigative effort, and improve operational effectiveness
Evaluate emerging technologies, AI capabilities, and security monitoring solutions to advance GM's detection maturity