Sr. Staff Cyber Intelligence Analyst

GE Vernova is seeking a Sr. Staff Cyber Intelligence Analyst to help protect its global brand, products, customers, and business partners. The role produces and deploys actionable threat intelligence, supports counter-threat operations and incident response, manages intelligence content, and advances threat detection and automation.

Responsibilities:

• Generate actionable intelligence, create and test signatures, queries and analytics used to detect threat activity using TTP based threat intelligence, threat actor artifacts and behaviors aligned to Lockheed Cyber KillChain, and Mitre ATT&CK
• Engage in active threat intelligence collection, and processing to stay ahead of threat activity
• Manage up to date threat intelligence database content and context, ensuring all key threat actors, their capabilities and countermeasures are known across the organization
• Ensure threat intelligence is actively deployed across the technology stack to protect the company
• Provide intelligence support for CIRT, Data Protection and Product teams
• Produce relevant and timely alerts and briefings on threat activity
• Engage and support incident detection and response activities as needed
• Promote a culture of engagement, execution and accountability across the team
• Champion continual improvement and actively automate repetitive tasks to reduce human toil
• Communicate effectively both within immediate team and GE leadership. Ensure team receives consistent messages and has clear understanding of business direction, strategy, and results

Requirements:

• Bachelor's degree in computer science or “STEM” Majors (Science, Technology, Engineering and Math) or equivalent
• 10 plus years of experience in Cybersecurity and threat intelligence disciplines; or equivalent knowledge or experience
• Team oriented, with a bias for action and execution
• Has a passion for the work and raising cost to adversaries
• Collaborative, and actively strives to break down siloes to empower and inspire a globally remote team
• Experience with data analysis tools such as Splunk or other SIEM products
• Detailed understanding of APT, Cyber Crime and other associated cyber threat tactics
• Experience in Network Security Monitoring practices, with direct hands-on experience with one or more NSM related technologies (Suricata, Snort, Zeek, etc.)
• Experience with host-based detection and IR technologies such as CrowdStrike, Carbon Black, Tanium, Windows Defender ATP or similar
• Experience working with cloud technologies (AWS, Azure, SaaS, etc.)
• Familiarity with scripting / programming (Python & Jupyter preferred)
• Familiar with CND-based analytical models (Kill Chain, Pyramid of Pain, ATT&CK, etc.)
• Ability to set and manage expectations with key stakeholders and team members
• Strong ability to prioritize and execute with minimal direction or oversight
• Exceptional critical thinking, writing, and presentation skills that properly qualify assessments with concise, relevant, and accurate communications
• Proven track record of successfully managing and executing on short term and long-term projects and the ability to establish rapport with various roles (executive management to deeply technical)
• CISSP, CISM or related SANs certifications, or relevant technical experience preferred