Cybersecurity Engineer - Cloud

GM Financial; Arlington (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

GM Financial is seeking a Cybersecurity Engineer to design, deploy, monitor, and tune security controls across the corporate network. You will work with Threat Intelligence, Vulnerability Management and Incident Response teams to identify and mitigate threats and to implement technologies such as SIEM, DLP, and WAF.

The role involves analyzing logs, communicating security requirements to leadership, and participating in emergency response activities to protect corporate assets and users.

Qualifications

• Security-minded professional with ability to design and implement safeguards.
• Experience analyzing logs and detecting unauthorized access or anomalies.
• Ability to communicate security requirements to leadership and stakeholders.

Responsibilities

• Prepare technical requirements and standards for security projects.
• Design and deploy security technologies (SIEM, DLP, IDS/IPS, endpoint security, WAF).
• Monitor, tune and report on security controls; assist in investigations into threats.

Skills

Security engineering

Analytical thinking

Tools

SIEM

DLP

IDS/IPS

Endpoint security

WAF

Email Gateways

Job description

Why GM Financial Cybersecurity?

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.

Job Description

Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.
Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.
Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.

Responsibilities

About the role:

The Cybersecurity Engineer is responsible for developing, deploying, monitoring, tuning, evaluating, reporting and maintaining systems and procedures; and to identify and mitigate threats to the corporate network, corporate assets and corporate users. This team member will identify core requirements, design and implement security technologies and work with stakeholders to perform ongoing tuning and alerting on those technologies. Security technologies may include, but are not limited to: Data Loss Prevention (DLP), Security Incident Event Management (SIEM), User Behavior Analytics, Host Intrusion Prevention (HIPS) and Web/Email Gateway. This team member will be responsible for both technical implementation of systems and communication of security requirements to management and security leadership. Additionally, this team member will be responsible, as necessary, with assisting in investigations into security threats.

In this role you will:

• Prepares technical requirements and standards
• Assists in the identification, engineering and designing of security technologies including, but not limited to: Security Incident and Event Managers (SIEM) and threat intelligence solutions, Web filtering (proxy, network AV), Intrusion Detection and Prevention Systems (IDS/IPS), Endpoint security solutions, Data Loss Prevention (DLP), Vulnerability Management (VM), Threat Intelligence and Threat Detection, Web Application Firewalls (WAF), Email Gateways, Breach Mitigation, Certificate Management, SSL encryption and decryption, Identity Management, Cloud Security, Database Security, Web Gateways, VPNs and Firewalls
• Performs analysis of system logs to identify unauthorized use or access
• Creates, analyzes and communicates security metrics to leadership
• Participates in emergency response team activities for responding to various security incidents
• Provides in-depth support for information security incidents including internal violations, hacker attacks