{"id":1962584,"url":"https://alion.io/job/gm-financial-sr-cybersecurity-engineer-2","title":"Sr Cybersecurity Engineer","company":{"id":1900050,"name":"GM Financial","domain":"gmfinancial.com","url":"https://alion.io/company/gmfinancial-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":78,"open_postings":15,"ghost_share":0,"stale_share":0.867,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Arlington, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":189000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1121},"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-10-06T15:05:06Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-13T13:21:33Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Why GM Financial Cybersecurity?\nInnovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.\nCybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.\nShape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.\n About the role\nThis role serves as the senior subject matter expert for cloud incident response across Microsoft Azure and Microsoft 365. You will lead high-impact investigations, mentor responders, and continuously improve the speed, quality, and repeatability of cloud incident response operations. This position is ideal for an experienced cloud security engineer, architect, or incident responder who thrives in complex investigations and wants to shape how cloud response is done at scale.\nIn this role you will:\nLead Azure and Microsoft 365 security investigations, including identity compromise, privilege escalation, persistence, data exfiltration, and abuse of cloud services\nAct as the senior escalation point for complex cloud investigations, providing investigative direction and response strategy\nPerform investigations using Azure Activity Logs, Entra ID logs, Microsoft 365 Unified Audit Log, Defender telemetry, and related forensic artifacts\nDevelop and standardize cloud-specific incident response playbooks to improve consistency and efficiency\nStay current with evolving attack techniques and security technologies to design, build, and continuously refine cloud detections and alerts across Azure and Microsoft 365\nParticipate in an on-call rotation as needed to support timely response to security incidents outside of standard business hours\n What makes you an ideal candidate?\nExtensive hands-on experience responding to security incidents in Microsoft Azure and/or Microsoft 365\nFunctional knowledge of Microsoft Defender, Azure Sentinel and underlying Azure Architecture\nStrong understanding of Azure tenant and subscription architecture, Entra ID identity models, roles, conditional access, and privilege management\nDeep familiarity with cloud logging, telemetry sources, and forensic artifacts, including what is available, how it is acquired, and how attackers attempt to evade it\nAdvanced experience writing and optimizing KQL queries for investigation and threat hunting across Defender data sources\nAbility to use Graph API, PowerShell, and automation to acquire evidence, investigate at scale, and accelerate response actions\nDemonstrate strong familiarity with cloud security platforms such as Microsoft Defender and Wiz\nStrong knowledge of the NIST Incident Response Life Cycle and the MITRE ATT&CK Framework\nExperience translating investigations into repeatable response processes, documentation, and improvement opportunities for detection and prevention.\nBackground in cloud security engineering or architecture or prior senior-level incident response experience with significant cloud exposure.\nDemonstrated ability to communicate across multiple levels of stakeholders\nAbility to document and summarize technical evidence and findings\nGood interpersonal, verbal, and written communication skills across various mediums\nAbility to exercise prudent judgment and offer knowledgeable recommendations\nWork Experience\n3-5 years of experience in large and complex business environments with a successful track record working directly with senior level management preferred\n3-5 years of experience in one or more of the following domains: Cybersecurity, Information Security, Network Engineering, or Network Operations, Information Technology, Application Development preferred\nHigh School Diploma or equivalent required\nBachelor’s Degree in related field or equivalent work experience strongly preferred\nLicenses and Certifications\nOne or more security related certifications, such as CISSP, CCNP-Security, GIAC, CEH, or CPTS highly preferred\nAdditional Knowledge and Skills\nWorking effectively within an AI enabled environment: Ability to use AI tools (e.g., Microsoft Copilot) to support daily work\nSkills in evaluating AI outputs for accuracy, compliance, and bias\nExperience integrating AI into workflows to improve efficiency or insights\nFamiliarity with AI assisted research, summarization, and content generation\nUnderstanding of responsible AI use, including ethics and data protection\n\nExperience with AI assisted software development or automation\nKnowledge of prompting techniques to improve output quality\nAwareness of emerging GenAI capabilities and limitations\nWhat We Offer: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.\nOur Culture: Our team members define and shape our culture - an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work - we thrive.\nCompensation: Competitive pay and bonus eligibility.\nWork Life Balance: Hybrid work environment, 4 days a week in office.\nNOTE: We are unable to consider candidates who require visa sponsorship for this position\nThis position is not open to agency submissions\n#GMFJobs #LI-Hybrid #LI-SC1","description_format":"text","description_chars":5872,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Financial Services","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-06T16:11:12Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":6,"expected_fill_days":44,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/gm-financial-sr-cybersecurity-engineer-2","json_url":"https://alion.io/job/gm-financial-sr-cybersecurity-engineer-2.json","meta":{"generated_at":"2026-10-13T17:22:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26526,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1900050},"rest":"https://alion.io/mcp/rest/get_company?id=1900050"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgm-financial-sr-cybersecurity-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgm-financial-sr-cybersecurity-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgm-financial-sr-cybersecurity-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gm-financial-sr-cybersecurity-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgm-financial-sr-cybersecurity-engineer-2"}]}