General Motors
Senior Cybersecurity Incident Handler
Warren, Michigan, United States of America +1 · Hybrid · Senior · Full-time · Posted Oct 16, 2026
- Location
- Warren, Michigan, United States of America
Austin, Texas, United States of America - Visa sponsorship
- GM does not provide immigration-related sponsorship for this role, now or in the future.
About the job
Investigates and responds to enterprise cyber incidents while building automation, integrations, and repeatable workflows to improve security operations.
What you'll do
- Triage, investigate, document, and coordinate containment and recovery for security incidents.
- Build and maintain response automation, tools, integrations, playbooks, and deployment workflows.
- Assess incident risk and impact, escalate appropriately, and collaborate with security and engineering teams.
What they ask for
- Incident response and investigation skills, including triage, evidence collection, endpoint investigation, containment, remediation, and recovery.
- Windows live-response design and deployment, including multi-host workflows, YARA scanning, and file operations.
- CrowdStrike Falcon administration and engineering across the capabilities listed in the posting.
- Python development, GitHub repository and workflow practices, CI/CD, and Infrastructure as Code.
Nice to have
- Experience with Velociraptor or comparable endpoint live-response platforms.
- Experience with YARA, endpoint forensics, enterprise security integrations, or governed environments.
Tools
Python, CrowdStrike Falcon, GitHub Actions, Terraform, MISP, Slack, Confluence, Sguil
Model-written summary · the original posting is authoritative