Senior Cyber Incident Response Lead (Hybrid, Warren)

Cybersecurity Jobs; Warren (MI); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Relocation benefits

Hybrid work environment

Job summary

General Motors is seeking a Senior Cybersecurity Incident Response Coordinator in Warren, MI. The role drives end‑to‑end coordination of complex incidents, translating technical findings into business risk decisions and leading communications across the incident lifecycle.

You will partner with Security Operations, incident handlers, application security, vulnerability management, and leadership to ensure timely containment and recovery while maintaining governance and post‑incident improvements.

Qualifications

• Experience coordinating complex cybersecurity incidents or other high‑impact technology events.
• Advanced written and verbal communication skills, including briefing senior leaders.
• Proven ability to make timely, sound decisions under pressure and ambiguity.
• Strong customer service and relationship management across technical and business stakeholders.

Responsibilities

• Lead coordination of complex cybersecurity incidents from triage to containment, eradication, recovery, and post‑incident review.
• Serve as primary coordination point across GM Security Operations, incident handlers, and related teams.
• Apply containment methods balancing business continuity, risk, and recovery needs.
• Collect, validate and document victim, asset, and business‑impact information for risk‑based decisions.
• Maintain incident status, logs, and stakeholder communications throughout the response.
• Communicate actions, risks, findings, and recovery plans to technical and non‑technical audiences including leadership.

Skills

Incident coordination

Executive communication

Risk-based decision making

Leadership

Project management

Collaboration

Analytical thinking

Job description

General Motors is seeking a Senior Cybersecurity Incident Response Coordinator in Warren, MI. The role drives end‑to‑end coordination of complex incidents, translating technical findings into business risk decisions and leading communications across the incident lifecycle.

You will partner with Security Operations, incident handlers, application security, vulnerability management, and leadership to ensure timely containment and recovery while maintaining governance and post‑incident improvements.