Senior Cybersecurity Incident Responder

Cybersecurity Jobs; Warren (MI); Hybrid; USD 120,000 - 190,000; Full time

Benefits offered by this job

Relocation benefits

Job summary

General Motors seeks a Senior Cybersecurity Incident Handler to investigate, coordinate, and resolve cyber security incidents across the enterprise. The role is hybrid in Warren, MI, focusing on triage, evidence-driven investigation, containment, eradication, recovery support, and clear escalation based on risk and business impact.

You will help make response operations repeatable and scalable by turning manual tasks into documented workflows, automations, and integrations, using endpoint and

Qualifications

• Experience in incident response, triage, and evidence collection for enterprise environments.
• Ability to design and document repeatable response processes and playbooks.
• Proficiency with security tooling and scripting to automate investigations.

Responsibilities

• Triage and investigate security alerts and incidents across endpoints, identities, malware, and network activity.
• Develop investigative plans, gather evidence, analyze telemetry, and document findings.
• Coordinate containment, eradication, and remediation actions with cross-functional teams.
• Use CrowdStrike Falcon, Next-Gen SIEM, live-response tooling, IT Automation to investigate incidents.
• Create complete incident documentation including timelines and lessons learned.
• Contribute to and maintain response playbooks, wiki content, and operational procedures.

Skills

Incident triage

Evidence collection

Endpoint investigation

Python development

Security operations

Live response

Tools

CrowdStrike Falcon

Fusion Workflows

Next-Gen SIEM

YARA

IT Automation

GitHub

Velociraptor

MISP

Sguil

Confluence

GitHub Actions

GitHub Pages

NGSIEM

BitLocker

Job description

General Motors seeks a Senior Cybersecurity Incident Handler to investigate, coordinate, and resolve cyber security incidents across the enterprise. The role is hybrid in Warren, MI, focusing on triage, evidence-driven investigation, containment, eradication, recovery support, and clear escalation based on risk and business impact.

You will help make response operations repeatable and scalable by turning manual tasks into documented workflows, automations, and integrations, using endpoint and