{"id":2642211,"url":"https://alion.io/job/ge-appliances-senior-security-engineer-security-operations","title":"Senior Security Engineer- Security Operations","company":{"id":1831627,"name":"GE Appliances","domain":"geappliancesco.com","url":"https://alion.io/company/geappliancesco","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":9,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":46,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Louisville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":111000,"max_usd":213000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"KEV","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"CI/CD","optional":true},{"name":"Git","optional":true},{"name":"LLM","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Prometheus","optional":true},{"name":"Red Teaming","optional":true}],"status":"live","first_seen_at":"2026-10-15T19:11:04Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-20T10:06:43Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"At GE Appliances, a Haier company, we come together to make “good things, for life.” As the fastest-growing appliance company in the U.S., we’re powered by creators, thinkers and makers who believe that anything is possible and that there’s always a better way. We believe in the power of our people and in giving them the freedom to explore, discover and build good things, together.\nThe GE Appliances philosophy, backed by three simple commitments defines the way we work, invent, create, do business, and serve our communities: we come together, we always look for a better way, and we create possibilities.\nInterested in joining us on our journey?\nGE Appliances is seeking a Senior Security Engineer, Security Operations to serve as the senior technical lead for the company’s detection and response capability. Day-to-day 24x7 monitoring, alert triage, and vulnerability operations are delivered by our managed security services provider (MSSP); this role is not a shift lead or people manager. Instead, it owns the engineering behind the SOC - the detection and response platforms, detection content, automation, and telemetry - and drives the execution and continuous enhancement of how threats are detected, investigated, and contained across enterprise IT, cloud, and manufacturing (OT) environments. The engineer acts as the MSSP’s technical counterpart and the escalation point for complex incidents, and is accountable for measurable improvements in detection coverage, detection fidelity, and response speed.Position\nSenior Security Engineer- Security OperationsLocation\nUSA, Louisville, KYHow You'll Create Possibilities\nKey Responsibilities:\nServe as the senior technical lead and subject-matter expert for security operations, owning the architecture, configuration, and operational health of the detection and response platforms and setting the technical standards the MSSP operates against.\nDesign, build, test, and maintain detection content - correlation rules, behavioral analytics, and IOC/BIOC rules - mapped to the MITRE ATT&CK framework, and manage the full detection lifecycle using detection-as-code practices (version control, testing, peer review, and documentation).\nOwn telemetry coverage: identify visibility gaps and onboard, parse, and normalize log sources across endpoints, identity, Microsoft 365, cloud, network, email, DLP, and OT; monitor ingestion health and manage data volume and retention cost.\nEngineer security automation and orchestration (SOAR) playbooks and integrations that enrich alerts, automate containment, and connect security tooling with IT service management and collaboration platforms to reduce manual effort and MSSP handling time.\nProvide technical oversight of MSSP output, in partnership with the Information Security leader who owns the MSSP commercial relationship: review triage and investigation quality, escalation accuracy, and run-book adherence; drive false-positive reduction and tuning; and update MSSP run books and playbooks as detections and the environment change.\nServe as the Tier 3 escalation point and technical lead for complex or high-severity incidents escalated by the MSSP, performing hands-on investigation, endpoint and log analysis, scoping, and containment, and coordinating with the external incident response retainer when engaged.\nLead hypothesis-driven threat hunting informed by threat intelligence and threats targeting manufacturing, converting hunt findings into durable detections and hardening recommendations.\nOperationalize threat intelligence by translating advisories, vulnerability disclosures, and adversary reporting into detections, hunts, and blocking actions, and track threat actors relevant to GE Appliances.\nValidate detection and response effectiveness through purple-team exercises, adversary emulation, and breach-and-attack simulation, measuring coverage against MITRE ATT&CK and confirming that the MSSP detects and responds as expected.\nMaintain EDR/XDR platform health across the endpoint and server estate, including agent coverage, prevention and exploit-protection policies, exclusions governance, and response actions.\nStrengthen the technical side of vulnerability operations run by the MSSP, including scan coverage and authenticated scanning, risk-based prioritization using exploitability and threat intelligence (e.g., CISA KEV, EPSS), correlation of vulnerabilities with active threat activity, and automation of remediation workflows.\nPartner with the Cloud, Network, and Identity security engineers to integrate cloud security posture (CNAPP), network, and identity signals into detection and response, including identity threat detection for account takeover, MFA fatigue, and adversary-in-the-middle (AiTM) phishing.\nPartner with OT Security to extend monitoring and detection into manufacturing environments in a way that is safe for production and consistent with ISA/IEC 62443 and NIST SP 800-82.\nAuthor and maintain incident response playbooks, technical run books, and tabletop exercise scenarios, and lead the technical portion of post-incident reviews to drive corrective actions to closure.\nDefine, automate, and report operational metrics and KPIs, such as MTTD, MTTR, ATT&CK detection coverage, false-positive rate, log source health, and MSSP escalation quality, to the CISO and Information Security leadership.\nContribute to the security operations roadmap; evaluate emerging capabilities, including AI-assisted triage and investigation and agentic SOC automation; and support platform evaluations, proofs of concept, and total cost of ownership (TCO) analyses.\nProvide technical evidence for logging, monitoring, and incident response controls in SOX, C-SOX, PCI-DSS, and other audits, and drive remediation of related findings.\nMentor engineers and transfer knowledge to MSSP analysts on the GE Appliances environment, detections, and response procedures.\nWhat You'll Bring to Our Team\nRequirements & Qualifications:\nBachelor’s degree in Information Systems, Cybersecurity, Computer Science, or a related technical field, or equivalent practical experience.\n6-10 years of progressive experience in IT or information security, with at least 4+ years of hands-on experience in security operations, detection engineering, or incident response in a large enterprise environment.\nDeep hands-on experience engineering and administering SIEM/SOAR and EDR/XDR platforms (e.g., Palo Alto Networks Cortex XSIAM/XDR, Splunk, Microsoft Sentinel/Defender, CrowdStrike), including writing detection rules and queries (e.g., XQL, SPL, KQL).\nProven experience building detection content mapped to MITRE ATT&CK and tuning it for fidelity at enterprise scale.\nExperience building SOAR playbooks and integrations, with proficiency in Python and/or PowerShell and working with REST APIs and JSON.\nHands-on incident response experience with significant enterprise incidents such as ransomware, business email compromise (BEC), and account takeover, including endpoint, log, and network analysis.\nExperience working with an MSSP or MDR provider in a technical oversight role, including tuning, escalation quality review, and run-book development.\nStrong understanding of log sources and telemetry across Windows, Linux, network, cloud (AWS, Azure, and/or GCP), Microsoft 365, and identity providers.\nWorking knowledge of frameworks such as MITRE ATT&CK, NIST SP 800-61 (incident handling), NIST CSF, and CIS Controls.\nExcellent verbal and written communication skills with the ability to communicate with both technical and executive audiences.\nPreferred Qualifications\nCertifications: GIAC (e.g., GCIH, GCIA, GCDA, GCFA, GCTI), Palo Alto Networks Cortex certifications, CISSP, or similar.\nExperience with detection-as-code practices, Git, CI/CD pipelines, and vendor-neutral rule formats such as Sigma.\nExperience with threat hunting, purple teaming, and adversary emulation tools (e.g., Atomic Red Team, MITRE Caldera, breach-and-attack simulation platforms).\nFamiliarity with OT/ICS monitoring and frameworks such as ISA/IEC 62443 or NIST SP 800-82.\nExperience integrating cloud security (CNAPP/CSPM) and identity telemetry into detection and response.\nExperience applying AI and large language models to security operations, and familiarity with AI security frameworks such as MITRE ATLAS and the OWASP Top 10 for LLM Applications.\nExperience in manufacturing, critical infrastructure, or global multinational organizations.\nWorking Conditions:\nWorking conditions are normal for an office environment.\nWork may require occasional weekend and/or evening work, including after-hours escalation for major security incidents and participation in an on-call rotation.\nOur Culture\nOur work is centered on our People and Culture as reflected in our Zero Distance philosophy and we recognize the importance of reaffirming our commitment to inclusion and diversity (I&D). This underscores our commitment to fostering an environment where every individual feels valued, connected, and empowered to contribute, while positioning our organization to adapt seamlessly to the evolving needs of our workforce and communities.\nThis reflects our dedication to creating solutions that: Empower colleagues by fostering an environment where all voices are heard, valued, and encouraged to contribute. Strengthen communities where we live and work. Reinforce a culture of belonging, purpose, and engagement. Reflect the diversity of the communities we serve through our workforce, products, and practices.\nBy further embedding Zero Distance into our People and Culture framework, we will continue to build a deeply connected organization. We are cultivating a culture of engagement, belonging, and connection, because while attracting new talent remains a priority, retention is a cornerstone of our strategy.\nGE Appliances is a trust-based organization. It is important we offer our employees the flexibility they need to do their best work while balancing the needs of the business and individuals. When you join GE Appliances, you will have the opportunity to work with your leader to create a flexible work arrangement that balances the needs of the individual, team, and organization.\nGE Appliances is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.\nGE Appliances participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S\nIf you are an individual with a disability and need assistance or an accommodation to use our website or to apply, please send an e-mail to ","description_format":"text","description_chars":10823,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Home Appliances"],"lifecycle":[{"event":"open","at":"2026-10-15T19:11:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":46,"reasons":["conf:33","velocity","win:early","comp:brand"],"computed_at":"2026-10-20T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/ge-appliances-senior-security-engineer-security-operations","json_url":"https://alion.io/job/ge-appliances-senior-security-engineer-security-operations.json","meta":{"generated_at":"2026-10-20T13:33:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15052,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1831627},"rest":"https://alion.io/mcp/rest/get_company?id=1831627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fge-appliances-senior-security-engineer-security-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fge-appliances-senior-security-engineer-security-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fge-appliances-senior-security-engineer-security-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ge-appliances-senior-security-engineer-security-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fge-appliances-senior-security-engineer-security-operations"}]}