Description

Job Description Overview Opportunity to work in a hybrid model: Potential to work 4 days onsite and 1 day remote Why GM Financial Cybersecurity? GM Financial (GMF) is the wholly owned captive finance subsidiary of General Motors and is headquartered in Texas. We are a global provider of auto finance solutions, with operations in North America, South America, and Asia. Through our long-standing relationships with auto dealers, we offer attractive retail financing and lease programs to meet the needs of each customer. We also offer commercial lending products to dealers to help them finance and grow their businesses. At GMF our Cybersecurity organization is a global team consisting of architecture, engineering, operations, governance, and risk functions under the Chief Information Security Officer reporting directly to the CEO. We are hiring for multiple levels on our Cybersecurity Engineering teams including: Cloud Networking & Data Protection Incident Response Risk/Threat Detection Application Security Vulnerability Responsibilities What makes you an ideal candidate? Assists in the identification, engineering and designing of security technologies including, but not limited to: Security Incident and Event Managers (SIEM) and threat intelligence solutions, Web filtering (proxy, network AV), Intrusion Detection and Prevention Systems (IDS/IPS), Endpoint security solutions, Data Loss Prevention (DLP), Vulnerability Management (VM), Threat Intelligence and Threat Detection, Web Application Firewalls (WAF), Email Gateways, Breach Mitigation, Certificate Management, SSL encryption and decryption, Identity Management, Cloud Security, Database Security, Web Gateways, VPNs and Firewalls Performs analysis of system logs to identify unauthorized use or access Creates, analyzes and communicates security metrics to leadership Participates in emergency response team activities for responding to various security incidents Provides in-depth support for information security incidents including internal violations, hacker attacks, virus and system outages Participates in periodic information systems risk assessments Develops detailed proposals and plans for new information security systems that would enhance or enable new capabilities for network or host systems Recommends and evaluates security tools to identify more efficient and effective security measures Qualifications Experienc Bachelor’s Degree in related field or equivalent work experience strongly preferred 1-5 years experience in one or more of the following domains: Cybersecurity, Cloud Computing, Network Engineering, Network Operations, Information Technology Support, System Administrator, Data Science, Software Development (python, node.js, React) preferred Information Security Certifications strongly preferred (such as CISSP, CCNP-Security, GIAC, CEH, CPTS, is highly preferred)

Role and Responsibilities

• Responsibilities What makes you an ideal candidate? Assists in the identification, engineering and designing of security technologies including, but not limited to: Security Incident and Event Managers (SIEM) and threat intelligence solutions, Web filtering (proxy, network AV), Intrusion Detection and Prevention Systems (IDS/IPS), Endpoint security solutions, Data Loss Prevention (DLP), Vulnerability Management (VM), Threat Intelligence and Threat Detection, Web Application Firewalls (WAF), Email Gateways, Breach Mitigation, Certificate Management, SSL encryption and decryption, Identity Management, Cloud Security, Database Security, Web Gateways, VPNs and Firewalls Performs analysis of system logs to identify unauthorized use or access Creates, analyzes and communicates security metrics to leadership Participates in emergency response team activities for responding to various security incidents Provides in-depth support for information security incidents including internal violations, hacker attacks, virus and system outages Participates in periodic information systems risk assessments Develops detailed proposals and plans for new information security systems that would enhance or enable new capabilities for network or host systems Recommends and evaluates security tools to identify more efficient and effective security measures