General Electric Senior Cyber Security Researcher in Budapest, Hungary
Job Description Summary
At GE Renewable Energy we are building a program to detect risk and policy violations. This Senior Cyber Security Researcher role will be to defend GE Renewable Energy’s security posture from threats against data theft and corporate espionage campaigns.
The person will be responsible for reducing risk through the development of detection capabilities for GE Renewable Energy’s Insider Threat Program. The person will understand business priorities to build detective capabilities that address data movement policy violations. They will identify and select new data sources to expand the program’s reach and impact.
Roles and Responsibilities
Develop and implement detection policies to detect high risk policy violations based on risk.
Tune alerts and policies to reduce false positives, ensure accurate results, and show the most relevant information
Use analytical tools and techniques to corollate logs and information to build new detective capabilities
Prioritize development of new capabilities based on business risk
Identify new data sets for ingestion into the insider threat platform based on outcomes and business risk
Develop visualization dashboards and indicators that identify anomalous activities.
Defining strategy and design around data collection, aggregations, and summarization processes
Developing dashboards with visual metrics for stakeholders
Writing and developing custom scripts, programs as needed in splunk
Reviewing alerts to determining risk and policy violations.
Partnering with other teams to support data capture and advanced data analytics and forecasting efforts to support proactive identification of issues
Enforcing best practices related to summarizing and querying data
Relevant hands-on IT experience in a large Enterprise setting
Demonstrated problem solving and logical thinking skills
Experience developing in Splunk or other log management and analysis tools
Experience using Snypr Securonix, or comparable insider detection tools
Experience as an insider threat developer or analysist
Relocation Assistance Provided: No