General Electric Sr Risk Analyst – Web Application Firewall Specialist in Chicago, Illinois
Role Summary:The Sr Risk Analyst will be responsible for leading our web-application-firewall (WAF) program, including aspects relating to: procurement, adoption, implementation, maintenance, metrics, and continuous improvement of the program. The analyst will be responsible for identifying candidate websites and facilitating their onboarding to the WAF solution.
This role requires strong project management abilities as well as working knowledge of web application hosting concepts such as website certificates, domain name system records, and content delivery networks. The analyst will be responsible for integration into and operationalization by the incident response teams of all relevant security data and alert data generated by the WAF.
In this role, you will:
Procure, implement, and support a WAF-based solution
Identify candidate web applications for migration to WAF protection from configuration management database and other sources
Provide web application support teams with technical guidance and facilitate solution onboarding
Assure security event data and alerting data is collected and tuned for high-fidelity
Assure security event data and alerting data is ingested and operationalized via the incident response team’s processes and procedures
Develop and maintain metrics that adequately visualize program health using company standard toolsets (SQL-based)
Develop and maintain meaningful risk metrics that communicate program status effectively
Report out on overall program progress to stakeholders, team members, and senior leadership periodically or as needed
Develop testing capabilities to demonstrate WAF solution efficacy
The best candidates for the role work well with other people, have strong verbal and written communication skills, strong time management skills and strong influencing skills
Bachelor’s Degree in Computer Science or in “STEM” Majors (Science, Technology, Engineering and Math) or Information Technology
Minimum of 4 years of experience in information security
Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.
Any offer of employment is conditioned upon the successful completion of a background investigation and drug screen
Must be willing to travel (<10%)
Must be willing to work out of an office located in Wauwatosa, WI; Waukesha, WI; Chicago, IL; Van Buren Township, MI; Glen Allen, VA
Strong project management skills
Strong motivation and influencing skills
Familiarity with or prior experience working with web application firewalls
Familiarity with content delivery networks and integrating web applications into them
Familiarity with web application development
Familiarity of common web-application exploits, threats and mitigation strategies
Familiarity with security incident event management (SIEM) concepts and solutions
Familiarity with Agile methodology and concepts
Strong oral and written communication skills, ability to communicate appropriately to both technical and managerial audiences
Well-rounded experience in security aspects of platforms, operating systems, software, communications, and network protocols.
Passionate about information security
GE (NYSE:GE) drives the world forward by tackling its biggest challenges. By combining world-class engineering with software and analytics, GE helps the world work more efficiently, reliably, and safely. GE people are global, diverse and dedicated, operating with the highest integrity and passion to fulfill GE’s mission and deliver for our customers. www.ge.com
GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, gender (including pregnancy), sexual orientation, gender identity or expression, age, disability, veteran status or any other characteristics protected by law.
Additional Eligibility Qualifications:GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).Additional Locations:United States;Illinois, Virginia, Wisconsin;Chicago, Waukesha, Wauwatosa, Glen Allen,;