Senior Cyber Detection & Incident Lead

generalmotors; Warren (MI); Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Relocation benefits

Job summary

General Motors is seeking a Senior Cyber Detection Incident Analyst to protect our global enterprise by identifying and investigating advanced threats across cloud, endpoint, network, and manufacturing ecosystems.

You will lead complex investigations, develop detection logic across SIEM/EDR/SOAR, and mentor analysts while collaborating with multiple cybersecurity teams to improve detection maturity. Hybrid work and on-call availability are required.

Qualifications

• Bachelor’s degree in cybersecurity or related field or equivalent practical experience.
• 5+ years in cybersecurity with focus on detection engineering, security operations, incident response, threat hunting, intrusion detection, or security event analysis.
• Experience with enterprise SIEM platforms and log-centric detection methodologies.
• Experience developing and tuning security detections using correlation logic, behavioral analytics, and threat intelligence.
• Strong understanding of endpoint security technologies and EDR platforms.
• Experience investigating security events across endpoint, network, cloud, identity, and application environments.
• Knowledge of attacker tactics, techniques, and procedures (TTPs) and familiarity with MITRE ATT&CK framework.
• Experience using scripting and query languages such as Python, PowerShell, or similar technologies.
• Strong analytical, troubleshooting, and investigative skills.
• Experience communicating technical findings to both technical and non-technical audiences.
• Ability to lead investigations during cybersecurity incidents.
• Demonstrated ability to collaborate effectively across multiple teams and stakeholders.
• Ability and willingness to participate in a 24x7 on-call rotation.

Responsibilities

• Lead advanced investigations involving complex security incidents, emerging threats, and high-severity escalations.
• Develop, implement, and optimize detection logic across SIEM, EDR, NDR, SOAR, cloud-native security platforms, and other security monitoring technologies.
• Conduct threat hunting activities to proactively identify adversary behaviors, attack techniques, and detection gaps.
• Apply threat intelligence, adversary tradecraft, and MITRE ATT&CK methodologies to improve detection coverage effectiveness.
• Design, tune, and validate analytics to reduce false positives and improve alert fidelity.
• Develop automation, enrichment workflows, and operational efficiencies using AI, scripting and security orchestration technologies.
• Partner with Incident Response, Threat Intelligence, Cloud Security, Product Security, Manufacturing Security, and other cybersecurity teams to improve detection capabilities.
• Mentor and provide technical guidance to analysts and detection engineers.
• Drive continuous improvement initiatives that increase visibility, reduce investigative effort, and improve operational effectiveness.
• Evaluate emerging technologies, AI capabilities, and security monitoring solutions to advance GM's detection maturity.

Skills

Threat hunting

Detection engineering

MITRE ATT&CK

Python/PowerShell

Incident response

Mentoring

On-call readiness

Education

Bachelor's degree in Cybersecurity or related field

Tools

SIEM platforms

EDR

SOAR

Cloud security tools

Job description

General Motors is seeking a Senior Cyber Detection Incident Analyst to protect our global enterprise by identifying and investigating advanced threats across cloud, endpoint, network, and manufacturing ecosystems.

You will lead complex investigations, develop detection logic across SIEM/EDR/SOAR, and mentor analysts while collaborating with multiple cybersecurity teams to improve detection maturity. Hybrid work and on-call availability are required.