Senior Security Engineer- Security Operations
GE Appliances7 days ago
Louisville, KY, USASenior
Responsibilities
- Own the architecture, configuration, technical standards, and operational health of security detection and response platforms.
- Design, build, test, tune, and maintain detection content mapped to MITRE ATT&CK using detection-as-code practices.
- Identify telemetry gaps and onboard, parse, normalize, and monitor log sources across endpoints, identity, Microsoft 365, cloud, network, email, DLP, and OT environments.
- Engineer SOAR playbooks and integrations to enrich alerts, automate containment, and reduce manual MSSP handling time.
- Provide technical oversight of MSSP triage, investigations, escalations, run books, false-positive reduction, and detection tuning.
- Serve as the Tier 3 escalation point for major incidents, performing endpoint, log, and network analysis, scoping, containment, and coordination with incident-response providers.
- Lead threat hunting and operationalize threat intelligence into detections, hunts, blocking actions, and hardening recommendations.
- Validate detection and response through purple-team exercises, adversary emulation, breach-and-attack simulation, and MITRE ATT&CK coverage measurement.
- Maintain EDR/XDR coverage, prevention policies, exploit protection, exclusions governance, and response actions.
- Strengthen vulnerability operations through scan coverage, authenticated scanning, risk-based prioritization, threat correlation, and remediation automation.
- Partner with cloud, network, identity, and OT security teams to integrate signals and safely extend monitoring into manufacturing environments.
- Author incident-response playbooks, technical run books, tabletop scenarios, metrics, and post-incident corrective actions.
- Support security operations roadmaps, platform evaluations, proofs of concept, cost analyses, audits, and remediation of control findings.
- Mentor engineers and transfer knowledge to MSSP analysts.
Requirements
- Bachelor’s degree in Information Systems, Cybersecurity, Computer Science, or a related technical field, or equivalent practical experience.
- 6–10 years of progressive IT or information security experience, including at least 4 years of hands-on security operations, detection engineering, or incident response experience in a large enterprise environment.
- Deep hands-on experience engineering and administering SIEM, SOAR, and EDR/XDR platforms, including writing detection rules and queries.
- Experience building enterprise-scale detection content mapped to MITRE ATT&CK and tuning it for fidelity.
- Experience building SOAR playbooks and integrations, with proficiency in Python and/or PowerShell and REST APIs and JSON.
- Hands-on incident response experience involving ransomware, business email compromise, account takeover, endpoint analysis, log analysis, and network analysis.
- Experience providing technical oversight of an MSSP or MDR provider, including tuning, escalation-quality review, and run-book development.
- Strong understanding of telemetry across Windows, Linux, network, cloud environments, Microsoft 365, and identity providers.
- Working knowledge of MITRE ATT&CK, NIST SP 800-61, NIST CSF, and CIS Controls.
- Strong verbal and written communication skills for technical and executive audiences.
- Preferred certifications include GIAC credentials such as GCIH, GCIA, GCDA, GCFA, or GCTI, Palo Alto Networks Cortex certifications, CISSP, or similar.
- Preferred experience includes detection-as-code, Git, CI/CD pipelines, Sigma, threat hunting, purple teaming, adversary emulation, OT/ICS monitoring, CNAPP/CSPM, identity telemetry, AI and large language models for security operations, MITRE ATLAS, and the OWASP Top 10 for LLM Applications.
- Manufacturing, critical infrastructure, or global multinational experience is preferred.
Benefits
- Flexible work arrangement developed with the leader to balance individual, team, and business needs.
- Normal office working conditions with occasional weekend or evening work, after-hours escalation for major incidents, and participation in an on-call rotation.
- Equal opportunity workplace with a stated commitment to inclusion, diversity, belonging, and employee support.
About GE Appliances
GE Appliances designs, manufactures, and services home appliances—refrigerators, ranges, dishwashers, and laundry—for consumers, builders, and distributors across North America. It sells through major retailers, direct channels, and trade partners, and supports parts and in-home service. Founded in 1904 and headquartered in Louisville, Kentucky, the company operates under brands including GE, GE Profile, Monogram, Café, Hotpoint, and Haier, and has been owned by Haier since 2016.