Senior Cyber Detection & Incident Lead

General Motors LLC; United States; Hybrid; USD 130,000 - 195,000; Full time

Benefits offered by this job

Hybrid work model

Relocation benefits

Job summary

General Motors is seeking a Senior Cyber Detection Incident Analyst to lead advanced investigations and drive detection engineering across GM’s security stack. You will shape analytics for SIEM, EDR, NDR, and SOAR, while applying threat intelligence and MITRE ATT&CK methodologies.

This role requires mentoring others and partnering with Incident Response, Cloud Security, and Product Security teams. You will implement scalable detection capabilities across cloud, identity, endpoint, network, and

Qualifications

• Bachelor's degree or equivalent practical experience in a related technical field.
• 5+ years in cybersecurity with focus on detection engineering, security operations, IR, threat hunting, IDS, or log analysis.
• Experience with enterprise SIEM platforms and log-centric detection methodologies.
• Experience developing and tuning detections using correlation logic and threat intel.
• Strong knowledge of endpoint security technologies and EDR platforms.
• Experience investigating security events across endpoint, network, cloud, identity, and apps environments.
• Familiarity with MITRE ATT&CK and attacker TTPs.
• Proficient in scripting/query languages (Python/PowerShell).
• Excellent analytical, troubleshooting, and communication skills.
• Ability to lead investigations and collaborate across teams.

Responsibilities

• Lead advanced investigations of complex security incidents and high-severity escalations.
• Develop and optimize detection logic across SIEM, EDR, NDR, SOAR, and cloud security platforms.
• Conduct threat hunting to uncover adversary behaviors and gaps.
• Apply MITRE ATT&CK to improve coverage and effectiveness.
• Design and validate analytics to reduce false positives and improve alerts.
• Develop automation and enrichment workflows using scripting and security orchestration.
• Mentor analysts and detection engineers and collaborate across teams.
• Drive continuous improvement to increase visibility and reduce investigative effort.
• Evaluate new security technologies to advance GM's detection maturity.

Skills

Threat hunting

Incident response

Detection engineering

Scripting (Python/PowerShell)

Threat intelligence

Analytical mindset

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering

Tools

SIEM

EDR

NDR

SOAR

Cloud security platforms

Job description

General Motors is seeking a Senior Cyber Detection Incident Analyst to lead advanced investigations and drive detection engineering across GM’s security stack. You will shape analytics for SIEM, EDR, NDR, and SOAR, while applying threat intelligence and MITRE ATT&CK methodologies.

This role requires mentoring others and partnering with Incident Response, Cloud Security, and Product Security teams. You will implement scalable detection capabilities across cloud, identity, endpoint, network, and