Sr. Cyber Intelligence Analyst

As a Sr. Staff Cyber Intelligence Analyst, you will utilize your cyber security expertise to help GE Vernova protect its global brand, products, customers, and business partners. You are threat oriented to the core and have a strong desire to raise cost to our adversaries. You don’t admire problems, you solve them swiftly using threat and data driven approaches. You are a senior intelligence analyst in the organization, actively engaged in the production and deployment of actionable threat intelligence to support all major counter threat operations.

• Generate actionable intelligence, create and test signatures, queries and analytics used to detect threat activity using TTP based threat intelligence, threat actor artifacts and behaviors aligned to Lockheed Cyber Kill Chain, and Mitre ATT&CK.
• Engage in active threat intelligence collection, and processing to stay ahead of threat activity.
• Manage up to date threat intelligence database content and context, ensuring all key threat actors, their capabilities and countermeasures are known across the organization.
• Ensure threat intelligence is actively deployed across the technology stack to protect the company.
• Provide intelligence support for CIRT, Data Protection and Product teams.
• Produce relevant and timely alerts and briefings on threat activity.
• Engage and support incident detection and response activities as needed.
• Promote a culture of engagement, execution and accountability across the team.
• Champion continual improvement and actively automate repetitive tasks to reduce human toil.
• Communicate effectively both within immediate team and GE leadership.
• Ensure team receives consistent messages and has clear understanding of business direction, strategy, and results.

• Bachelor's degree in computer science or “STEM” Majors (Science, Technology, Engineering and Math) or equivalent
• 10 plus years of experience in Cybersecurity and threat intelligence disciplines; or equivalent knowledge or experience

• Team oriented, with a bias for action and execution
• Has a passion for the work and raising cost to adversaries
• Collaborative, and actively strives to break down siloes to empower and inspire a globally remote team
• Experience with data analysis tools such as Splunk or other SIEM products
• Detailed understanding of APT, Cyber Crime and other associated cyber threat tactics
• Experience in Network Security Monitoring practices, with direct hands-on experience with one or more NSM related technologies (Suricata, Snort, Zeek, etc.)
• Experience with host-based detection and IR technologies such as Crowd Strike, Carbon Black, Tanium, Windows Defender ATP or similar
• Experience working with cloud technologies (AWS, Azure, SaaS, etc.)
• Familiarity with scripting / programming (Python & Jupyter preferred)
• Familiar with CND-based analytical models (Kill Chain, Pyramid of Pain, ATT&CK, etc.)
• Ability to set and manage expectations with key stakeholders and team members
• Strong ability to prioritize and execute with minimal direction or oversight
• Exceptional critical thinking, writing, and presentation skills that properly qualify assessments with concise, relevant, and accurate communications
• Proven track record of successfully managing and executing on short term and long-term projects and the ability to establish rapport with various roles (executive management to deeply technical)
• CISSP, CISM or related SANs certifications, or relevant technical experience preferred

GE Vernova offers a great work environment, professional development, challenging careers, and competitive compensation.

GE Vernova is an Equal Opportunity Employer. Employment decisions are made without regard…