Staff Incident Responder

Job description

3195889
Additional Cities

Glen Allen
Career Level

Experienced
Relocation Assistance

No
Business

GE Digital
Business Segment

Digital Technology
Function

Digital Technology
Country/Territory

United States
Additional States/Provinces

Virginia
Postal Code

23060-9297
Role Summary/Purpose

The Staff Incident Responder will be part of a dynamic, growing team, planning, preparing, hunting for, and responding to cyber incidents stemming from internal and external threat actors. Demonstration of leadership abilities in a large corporate environment as well as a strong comprehension of malware, emerging threats and calculating risk will be critical to success. Finally, this role requires the ability to work with minimal direction from Incident Response and company leadership.
Essential Responsibilities

You will directly contribute to the decision making related to enterprise, business unit, and product security strategies to develop more robust and secure business capabilities. In this role you will:

·  Continue to support the strategy for GE security solutions globally to ensure the team is delivering on business risk outcomes

·  Establish and maintain strong relationships across all GE businesses and key leadership

·  Provide support during cybersecurity incidents to include supporting the incident commander during high pressure cybersecurity incidents.

·  Work with a high functioning team dedicated to coordinating and facilitating response during significant cyber events

·  Supporting the development of Cyber crisis management playbooks, run books and plans to ensure effective response during a significant event.

·  Supporting the development and execution of regular crisis management exercises to include full simulations and table tops across GE business lines to drive continuous improvement and education.

·  Providing thought leadership for GE security solutions to ensure teams are delivering on business outcomes in a secure manner.

·  Establish and maintain strong relationships across all GE businesses and key leadership

·  Driving operational excellence and delivering continued program improvement overtime.

·  Understand and adhere to the regulatory and compliance requirements that impact either current business operations or potential client engagements

·  Partner with stakeholders and peers to enhance and deliver effective and efficient services to protect the global brand.
Qualifications/Requirements

Basic Qualifications

·  A 4-year degree in Computer Science, Computer Engineering or a STEM related field. In lieu of degree, 8 years of equivalent experience in IT is required

·  A minimum of 4 years of Cyber security experience

·  A minimum of 2 years of professional experience in incident coordination

Eligibility Requirements:

·  Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.

·  Must be willing to travel (15%)

·  Must be willing to work out of an office located in LOCATION NAME Glen Allen, Virginia.
Desired Characteristics

·  The best candidates for the role work well with other people and have strong verbal and written communication skills, a sense of diplomacy, and decision making skills to handle the often fast-paced role of an incident handler

·  Strong verbal and written communication skills

·  Detailed understanding of APT, Cyber Crime and other associated tactics

·  Strong track record of understanding and interest in recognized IT and OT security-related standards and technologies, demonstrated through training, job experience and/or industry

·  Knowledge of and/or working on GE OT products

·  Professional experience with Cyber Security, Operations Security, Product Security, Industrial Control Systems (ICS), Information Assurance, and Information Technology

·  Experience with host based detection and prevention suites (McAfee EPO, OSSEC, Yara, MIR, CarbonBlack, Tanium, etc.)

·  Experience with host-centric tools for forensic collection and analysis (SleuthKit, Volatility Framework, FTK, Encase, etc.)

·  Experience with Network Forensics and/or Network Security Monitoring (NSM) tools (Snort, Bro-IDS, PCAP, tcpdump, etc.) and analysis techniques (alert, flow/session and PCAP analysis)

·  Experience with malware and reverse engineering (Dynamic and static analysis)

·  Strong IT infrastructure background including familiarity with the following:

·  Networking (TCP/IP, UDP, Routing)

·  Applications (HTTP, SMTP, DNS, FTP, SSH, etc.)

·  Encryption (DES, AES, RSA) and hashing algorithms (MD5, SHA-1, etc.)

·  System/Application vulnerabilities and exploitation

·  Operating systems (Windows, *Nix, and Mac)

·  Cloud technology (SaaS, IaaS, PaaS) and associated digital forensics and incident response techniques

·  CISSP, CISM or related SANs certifications preferred

·  Active US government security clearance

·  Working knowledge of secure communication methods, including Secure Shell, S/MIME and PGP/GPG

#DTR
About Us

GE (NYSE:GE) drives the world forward by tackling its biggest challenges. By combining world-class engineering with software and analytics, GE helps the world work more efficiently, reliably, and safely. GE people are global, diverse and dedicated, operating with the highest integrity and passion to fulfill GE’s mission and deliver for our customers. www.ge.com
GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is anEqual Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.
Additional Eligibility Qualifications

GE will only employ those who are legally authorized to work in the United States for this opening.
Primary Country

United States
Primary State/Province

Virginia
Primary City

Glen Allen