Job Description Summary

As a Sr Staff Cyber Security Researcher, you will utilize your cyber security expertise to help GE Vernova protect its global brand, products, customers, and business partners. You do not admire problems, you solve them swiftly using threat and data driven approaches to raise cost to adversaries. You are a critical member of our detection engineering team that continually builds robust, high-fidelity detection based on actionable threat intelligence.

Job Description

Role Summary/Purpose

As a Sr Staff Cyber Security Researcher, you will utilize your cyber security expertise to help GE Vernova protect its global brand, products, customers, and business partners. You do not admire problems, you solve them swiftly using threat and data driven approaches to raise cost to adversaries. You are a critical member of our detection engineering team that continually builds robust, high-fidelity detection based on actionable threat intelligence.

 

Essential Responsibilities

• Foster a culture of collaboration, continuous improvement, execution, accountability, and innovation to protect the company, stay ahead of emerging threats, and raise costs to adversaries.
• Create and manage the full lifecycle of reliable and high-quality detection content for all major technology stacks using TTP based threat intelligence, threat actor artifacts and behaviors aligned to Lockheed Cyber KillChain, and Mitre ATT&CK.
• Conduct comprehensive and practical threat actor research to ensure we deploy the right detection in the right places using all available technologies to achieve reliable and timely coverage.
• Build and maintain a high-quality detection engineering practice that enables the entire team to contribute detection content.
• Collaborate with platform and automation teams to design and implement automated security solutions and integrations using SOAR platforms and APIs to streamline security operations, enhance incident detection & response, and automate repetitive tasks.
• Provide support, rapid analysis and detection expertise during incident response efforts.
• Mentor, train and educate members of the team on the latest capabilities, practices, and approaches to threat detection.
• Drive an AI-forward detection engineering approach by evaluating and applying machine learning and generative AI capabilities to improve threat detection fidelity, accelerate analysis, and enhance security operations at scale.

 

Basic Qualifications

• Bachelor's Degree in Computer Science or “STEM” Majors (Science, Technology, Engineering and Math) or significant relevant experience in a Cybersecurity domain.
• Minimum 8 years of Cyber experience.

 

Desired Characteristics

• AI-forward mindset with the ability to evaluate and apply emerging AI and machine learning capabilities to advance threat detection and security operations
• Team oriented, with a bias for action and execution
• Expertise in working with large data sets to develop detection analytics and behaviors
• Strong understanding of pro-active cyber defense through threat hunting
• Experience with DevOps and SecDevOps practices.
• Detailed understanding of APT, Cyber Crime and other associated cyber threat tactics
• Experience with data analysis tools such as Splunk, Sentinel or other SIEM products
• Familiarity with scripting / programming (Python & Jupyter preferred)
• Experience with detection rule writing (Suricata, Snort, Yara, Zeek, etc.)
• Familiar with CND-based analytical models (Kill Chain, Pyramid of Pain, ATT&CK, etc.)
• Experience in Network Security Monitoring practices, with direct hands-on experience with one or more NSM related technologies (Suricata, Snort, Zeek, etc.)
• Experience with host-based detection and IR technologies such as CrowdStrike, Carbon Black, Tanium, Windows Defender or similar
• Experience working with cloud technologies (AWS, Azure, SaaS, etc.)
• Ability to set and manage expectations with key stakeholders and team members
• Exceptional critical thinking, writing, and presentation skills to properly qualify assessments with concise, relevant information, leading to accurate execution plans

Additional Information