Senior Security Engineer, Detection & SOC Automation

GE Appliances; Louisville (KY); Presencial; USD 120 000 - 180 000; Tempo integral

Resumo da oferta

GE Appliances in Louisville, KY seeks a Senior Security Engineer to own detection and response platforms across enterprise IT, cloud, and OT. You will drive 24x7 monitoring, tuning, and automation with the MSSP, and lead complex incident investigations.

The role emphasizes threat hunting, telemetry optimization, and collaboration with Cloud/Network/Identity security. A strong background in SIEM/EDR and ATT&CK is essential.

Qualificações

• Bachelor’s degree or equivalent practical experience.
• 6–10 years in IT or information security with 4+ years in security operations or incident response.
• Hands-on experience engineering and administering SIEM/SOAR and EDR/XDR platforms; writing detection rules and queries.
• Proven experience building detection content mapped to MITRE ATT&CK and tuning for enterprise-scale fidelity.
• Experience building SOAR playbooks and integrations; proficiency in Python and/or PowerShell; REST APIs/JSON.
• Hands-on incident response experience with enterprise incidents (ransomware, BEC, account takeover).
• Experience working with MSSP or MDR providers in a technical oversight role; tuning, escalation quality review, run-book development.
• Strong understanding of telemetry across Windows, Linux, network, cloud, M365, identity providers.
• Familiarity with MITRE ATT&CK, NIST SP 800-61, NIST CSF, CIS Controls.
• Excellent written and verbal communication for technical and executive audiences.

Responsabilidades

• Serve as the senior technical lead for security operations, owning architecture and health of detection and response platforms.
• Design, build, test, and maintain detection content mapped to MITRE ATT&CK; manage detection lifecycle.
• Own telemetry coverage and onboard/normalize log sources across endpoints, cloud, OT; monitor ingestion health.
• Engineer SOAR playbooks and integrations; automate containment and tool orchestration.
• Provide Tier 3 escalation for complex incidents; hands-on investigation and containment.
• Lead threat hunting informed by intelligence; translate findings into durable detections.
• Operationalize threat intelligence into detections and blocking actions; track relevant actors.
• Validate detection/response via purple-team exercises and adversary emulation.
• Maintain EDR/XDR health across endpoints/servers; manage policies and exclusions.
• Collaborate with Cloud/Network/Identity security to integrate telemetry; support OT security alignment.
• Author incident response playbooks and post-incident reviews; drive corrective actions.

Conhecimentos

SIEM/SOAR engineering

EDR/XDR administration

Detection rule writing

MITRE ATT&CK mapping

SOAR playbooks

Python/PowerShell

REST APIs/JSON

Incident response

MSSP oversight

Log telemetry

Cloud telemetry

Identity security

Formação académica

Bachelor’s degree in Information Systems, Cybersecurity, Computer Science

Ferramentas

Palo Alto Cortex XSIAM/XDR

Splunk

Microsoft Defender/Defender for Cloud

CrowdStrike

Descrição da oferta de emprego

GE Appliances in Louisville, KY seeks a Senior Security Engineer to own detection and response platforms across enterprise IT, cloud, and OT. You will drive 24x7 monitoring, tuning, and automation with the MSSP, and lead complex incident investigations.

The role emphasizes threat hunting, telemetry optimization, and collaboration with Cloud/Network/Identity security. A strong background in SIEM/EDR and ATT&CK is essential.