Sr Cybersecurity Engineer

{
  "content_hash": "7c39b61daa0c7dc0b285a99bb3c068e7d3c17fda7a739e9e13aba09ceb2b1594",
  "source_hash": "4f67b3c0d5be525266280e57b12f4a3db72ce1cf7dfab688063fb0b2dbabd8ad",
  "last_changed_at": "2026-06-03T11:56:20.466Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Arlington, TX, United States",
    "city": "Arlington",
    "region": "TX",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-04T10:59:21.002Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Arlington, TX, United States",
      "city": "Arlington",
      "region": "TX",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "hybrid",
  "salary_period": "day",
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "detail": {
    "Id": "260064",
    "Title": "Sr Cybersecurity Engineer",
    "media": [],
    "skills": [],
    "JobType": null,
    "Category": "Technology",
    "JobGrade": null,
    "JobLevel": null,
    "JobShift": null,
    "WorkDays": null,
    "WorkHours": null,
    "WorkYears": null,
    "Department": null,
    "HotJobFlag": false,
    "StudyLevel": null,
    "WorkMonths": null,
    "WorkerType": null,
    "GeographyId": 100000029509895,
    "JobFamilyId": 300000008745193,
    "JobFunction": "Individual Contributor",
    "JobSchedule": "Full time",
    "BusinessUnit": null,
    "ContractType": null,
    "Organization": null,
    "TrendingFlag": false,
    "workLocation": [
      {
        "Country": "US",
        "Region1": "Tarrant",
        "Region2": "TX",
        "Region3": null,
        "Building": null,
        "Latitude": "32.69492",
        "Longitude": "-97.08886",
        "LocationId": 300000008728497,
        "PostalCode": "76014",
        "TownOrCity": "Arlington",
        "AddressLine1": "4001 Embarcadero",
        "AddressLine2": null,
        "AddressLine3": null,
        "AddressLine4": null,
        "LocationName": "US - Arlington AOC I, TX"
      }
    ],
    "ContentLocale": "en",
    "HiringManager": null,
    "LegalEmployer": null,
    "RequisitionId": 300000259301198,
    "WorkplaceType": "Hybrid",
    "BusinessUnitId": 300000008619124,
    "OrganizationId": 300000008750581,
    "GeographyNodeId": 100000221362191,
    "JobFunctionCode": "IND_CONT",
    "LegalEmployerId": 300000008558108,
    "PrimaryLocation": "Arlington, TX, United States",
    "RequisitionType": "Employee",
    "NumberOfOpenings": null,
    "WorkplaceTypeCode": "ORA_HYBRID",
    "BeFirstToApplyFlag": false,
    "otherWorkLocations": [],
    "secondaryLocations": [
      {
        "Name": "Fort Worth, TX, United States",
        "Latitude": "33.0173",
        "Longitude": "-97.31038",
        "CountryCode": "US",
        "GeographyId": 100000029509610,
        "GeographyNodeId": 100000221362182,
        "RequisitionLocationId": 300000259301203
      },
      {
        "Name": "Irving, TX, United States",
        "Latitude": "32.81352",
        "Longitude": "-96.95532",
        "CountryCode": "US",
        "GeographyId": 100000029509305,
        "GeographyNodeId": 100000221362201,
        "RequisitionLocationId": 300000259301204
      }
    ],
    "ExternalContactName": null,
    "ShortDescriptionStr": "Serves as a senior cloud incident responder, leading Azure alert investigations and incidents while improving speed, investigative quality, and repeatability across cloud‑native response operations.",
    "ExternalContactEmail": null,
    "ExternalPostedEndDate": null,
    "OtherRequisitionTitle": null,
    "requisitionFlexFields": [],
    "ApplyWhenNotPostedFlag": null,
    "DomesticTravelRequired": null,
    "ExternalDescriptionStr": "<div style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm 0cm 1pt;\"><p style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm;\"><span lang=\"EN-US\"><strong>Why GMF Cybersecurity?</strong></span></p><p style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm;\"><span lang=\"EN-US\">Innovation isn’t just a talking point at GM Financial, it’s how we operate. By joining our team, you’ll work in a mission-focused environment with specialized teams, including Engineering, Threat Intelligence, Vulnerability Management, Incident Response, Firewall, Governance, Risk, Architecture and Offensive Security. These teams collaborate to identify, manage and respond to threats, all while driving innovation across the environment.</span></p><p style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm;\"><span lang=\"EN-US\">Cybersecurity is central to our strategic vision, so you’ll benefit from exceptional leadership visibility, with direct reporting lines to the CEO. This structure ensures your work is recognized and supported at the highest levels, while also enabling bold innovation and the adoption of cutting-edge technologies.</span></p><p style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm;\"><span lang=\"EN-US\">Shape the future of Cybersecurity at GM Financial, with the freedom to explore, the tools to build and the support to thrive.&nbsp;</span></p><p style=\"border-color: currentcolor; border-image: initial; border-style: none; border-width: medium; padding: 0cm;\"><span lang=\"EN-US\">This position will be posted until filled.</span></p></div>",
    "ObjectVerNumberProfile": "2",
    "PrimaryLocationCountry": "US",
    "CorporateDescriptionStr": "",
    "ExternalPostedStartDate": "2026-05-15T17:19:26+00:00",
    "ExternalQualificationsStr": "<p><strong>What makes You an ideal candidate?</strong></p><p><strong>Knowledge and Skills</strong></p><ul style=\"list-style-type: disc;\"><li>Extensive hands<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>on experience responding to security incidents in Microsoft Azure and/or Microsoft 365</li><li>Strong understanding of Azure tenant and subscription architecture, Entra ID identity models, roles, conditional access, and privilege management</li><li>Deep familiarity with cloud logging, telemetry sources, and forensic artifacts, including what is available, how it is acquired, and how attackers attempt to evade it</li><li>Advanced experience writing and optimizing KQL queries for investigation and threat hunting across Defender data sources</li><li>Ability to use Graph API, PowerShell, and automation to acquire evidence, investigate at scale, and accelerate response actions</li><li>Demonstrate strong familiarity with cloud security platforms such as Microsoft Defender and Wiz</li><li>Strong knowledge of the NIST Incident Response Life Cycle and the MITRE ATT&amp;CK Framework</li><li>Experience translating investigations into repeatable response processes, documentation, and improvement opportunities for detection and prevention.</li><li>Background in cloud security engineering or architecture or prior senior<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>level incident response experience with significant cloud exposure.</li><li>Demonstrated ability to communicate across multiple levels of stakeholders</li><li>Ability to document and summarize technical evidence and findings</li><li><p>Good interpersonal, verbal, and written communication skills across various mediums</p><p>&nbsp;</p></li><li><p>Ability to exercise prudent judgment and offer knowledgeable recommendations</p><p>&nbsp;</p></li></ul><p>&nbsp;</p><p><strong>Education &amp; Work Experience</strong></p><ul><li>High School Diploma or equivalent required</li><li>Bachelor’s Degree in related field or equivalent work experience strongly preferred</li><li>3-5 years of experience in large and complex business environments with a successful track record working directly with senior level management preferred</li><li>3-5 years of experience in one or more of the following domains: Cybersecurity, Information Security, Network Engineering, or Network Operations, Information Technology, Application Development preferred</li></ul><p>&nbsp;</p><p><strong>Licenses and Certifications</strong></p><ul><li>One or more security related certifications, such as CISSP, CCNP-Security, GIAC, CEH, or CPTS highly preferred</li></ul><p>&nbsp;</p><p><span lang=\"EN-US\"><strong>What We Offer</strong>: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.</span></p><p><span lang=\"EN-US\"><strong>Our Culture:</strong>&nbsp;Our team members define and shape our culture — an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work — we thrive.</span></p><p><span lang=\"EN-US\"><strong>Compensation:</strong> Competitive pay and bonus eligibility.</span></p><p><span lang=\"EN-US\"><strong>Work Life Balance:</strong>&nbsp;Flexible hybrid work environment, 4-days a week in office.</span></p><p><span lang=\"EN-US\"><strong>NOTE:</strong></span><i><span lang=\"EN-US\">&nbsp;<strong>We are unable to consider candidates who require visa sponsorship for this position</strong></span></i></p><p><span lang=\"EN-US\"><strong>This position is not open to agency submissions</strong></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#GMFJobs</span></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#LI-ST1</span></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#LI-Hybrid</span></span></p>",
    "InternalQualificationsStr": "<p><strong>What makes You an ideal candidate?</strong></p><p><strong>Knowledge and Skills</strong></p><ul style=\"list-style-type: disc;\"><li>Extensive hands<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>on experience responding to security incidents in Microsoft Azure and/or Microsoft 365</li><li>Strong understanding of Azure tenant and subscription architecture, Entra ID identity models, roles, conditional access, and privilege management</li><li>Deep familiarity with cloud logging, telemetry sources, and forensic artifacts, including what is available, how it is acquired, and how attackers attempt to evade it</li><li>Advanced experience writing and optimizing KQL queries for investigation and threat hunting across Defender data sources</li><li>Ability to use Graph API, PowerShell, and automation to acquire evidence, investigate at scale, and accelerate response actions</li><li>Demonstrate strong familiarity with cloud security platforms such as Microsoft Defender and Wiz</li><li>Strong knowledge of the NIST Incident Response Life Cycle and the MITRE ATT&amp;CK Framework</li><li>Experience translating investigations into repeatable response processes, documentation, and improvement opportunities for detection and prevention.</li><li>Background in cloud security engineering or architecture or prior senior<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>level incident response experience with significant cloud exposure.</li><li>Demonstrated ability to communicate across multiple levels of stakeholders</li><li>Ability to document and summarize technical evidence and findings</li><li><p>Good interpersonal, verbal, and written communication skills across various mediums</p><p>&nbsp;</p></li><li><p>Ability to exercise prudent judgment and offer knowledgeable recommendations</p><p>&nbsp;</p></li></ul><p>&nbsp;</p><p><strong>Education &amp; Work Experience</strong></p><ul><li>High School Diploma or equivalent required</li><li>Bachelor’s Degree in related field or equivalent work experience strongly preferred</li><li>3-5 years of experience in large and complex business environments with a successful track record working directly with senior level management preferred</li><li>3-5 years of experience in one or more of the following domains: Cybersecurity, Information Security, Network Engineering, or Network Operations, Information Technology, Application Development preferred</li></ul><p>&nbsp;</p><p><strong>Licenses and Certifications</strong></p><ul><li>One or more security related certifications, such as CISSP, CCNP-Security, GIAC, CEH, or CPTS highly preferred</li></ul><p>&nbsp;</p><p><span lang=\"EN-US\"><strong>What We Offer</strong>: Generous benefits package available on day one to include: 401K matching, bonding leave for new parents (12 weeks, 100% paid), tuition assistance, training, GM employee auto discount, community service pay and nine company holidays.</span></p><p><span lang=\"EN-US\"><strong>Our Culture:</strong>&nbsp;Our team members define and shape our culture — an environment that welcomes innovative ideas, fosters integrity, and creates a sense of community and belonging. Here we do more than work — we thrive.</span></p><p><span lang=\"EN-US\"><strong>Compensation:</strong> Competitive pay and bonus eligibility.</span></p><p><span lang=\"EN-US\"><strong>Work Life Balance:</strong>&nbsp;Flexible hybrid work environment, 4-days a week in office.</span></p><p><span lang=\"EN-US\"><strong>NOTE:</strong></span><i><span lang=\"EN-US\">&nbsp;<strong>We are unable to consider candidates who require visa sponsorship for this position</strong></span></i></p><p><span lang=\"EN-US\"><strong>This position is not open to agency submissions</strong></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#GMFJobs</span></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#LI-ST1</span></span></p><p style=\"margin-left: 18pt;\"><span style=\"color: white;\"><span lang=\"EN-US\">#LI-Hybrid</span></span></p>",
    "OrganizationDescriptionStr": "",
    "primaryLocationCoordinates": [
      {
        "Latitude": "32.7356",
        "Longitude": "-97.10772",
        "CountryCode": "US",
        "GeographyId": 100000029509895,
        "GeographyNodeId": 100000221362191
      }
    ],
    "ExternalResponsibilitiesStr": "<p><strong>About the role</strong></p><p>This role serves as the senior subject matter expert for cloud incident response across Microsoft Azure and Microsoft 365. You will lead high<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>impact investigations, mentor responders, and continuously improve the speed, quality, and repeatability of cloud incident response operations. This position is ideal for an experienced cloud security engineer, architect, or incident responder who thrives in complex investigations and wants to shape how cloud response is done at scale.</p><p><strong>In this role you will:</strong></p><ul style=\"list-style-type: disc;\"><li>Lead Azure and Microsoft 365 security investigations, including identity compromise, privilege escalation, persistence, data exfiltration, and abuse of cloud services</li><li>Act as the senior escalation point for complex cloud investigations, providing investigative direction and response strategy</li><li>Perform investigations using Azure Activity Logs, Entra ID logs, Microsoft 365 Unified Audit Log, Defender telemetry, and related forensic artifacts</li><li>Develop and standardize cloud<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>specific incident response playbooks to improve consistency and efficiency</li><li>Stay current with evolving attack techniques and security technologies to design, build, and continuously refine cloud detections and alerts across Azure and Microsoft 365</li><li>Participate in an on<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>call rotation as needed to support timely response to security incidents outside of standard business hours</li></ul>",
    "InternalResponsibilitiesStr": "<p><strong>About the role</strong></p><p>This role serves as the senior subject matter expert for cloud incident response across Microsoft Azure and Microsoft 365. You will lead high<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>impact investigations, mentor responders, and continuously improve the speed, quality, and repeatability of cloud incident response operations. This position is ideal for an experienced cloud security engineer, architect, or incident responder who thrives in complex investigations and wants to shape how cloud response is done at scale.</p><p><strong>In this role you will:</strong></p><ul style=\"list-style-type: disc;\"><li>Lead Azure and Microsoft 365 security investigations, including identity compromise, privilege escalation, persistence, data exfiltration, and abuse of cloud services</li><li>Act as the senior escalation point for complex cloud investigations, providing investigative direction and response strategy</li><li>Perform investigations using Azure Activity Logs, Entra ID logs, Microsoft 365 Unified Audit Log, Defender telemetry, and related forensic artifacts</li><li>Develop and standardize cloud<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>specific incident response playbooks to improve consistency and efficiency</li><li>Stay current with evolving attack techniques and security technologies to design, build, and continuously refine cloud detections and alerts across Azure and Microsoft 365</li><li>Participate in an on<span style=\"font-family: &quot;Cambria Math&quot;, serif;\">‑</span>call rotation as needed to support timely response to security incidents outside of standard business hours</li></ul>",
    "InternationalTravelRequired": null
  },
  "list_job": {
    "Id": "260064",
    "Title": "Sr Cybersecurity Engineer",
    "JobType": null,
    "Distance": 1778803200000,
    "JobShift": null,
    "Language": "US",
    "WorkDays": null,
    "JobFamily": null,
    "Relevancy": 3,
    "WorkHours": null,
    "Department": null,
    "HotJobFlag": false,
    "PostedDate": "2026-05-15",
    "StudyLevel": null,
    "WorkerType": null,
    "GeographyId": 100000029509895,
    "JobFunction": null,
    "JobSchedule": null,
    "BusinessUnit": null,
    "ContractType": null,
    "ManagerLevel": null,
    "Organization": null,
    "TrendingFlag": false,
    "workLocation": [
      {
        "Country": "US",
        "Region1": "Tarrant",
        "Region2": "TX",
        "Region3": null,
        "Building": null,
        "Latitude": 32.69492,
        "Longitude": -97.08886,
        "LocationId": 300000008728497,
        "PostalCode": "76014",
        "TownOrCity": "Arlington",
        "AddressLine1": "4001 Embarcadero",
        "AddressLine2": null,
        "AddressLine3": null,
        "AddressLine4": null,
        "LocationName": "US - Arlington AOC I, TX"
      }
    ],
    "LegalEmployer": null,
    "MediaThumbURL": null,
    "WorkplaceType": "Hybrid",
    "BusinessUnitId": 300000008619124,
    "OrganizationId": 300000008750581,
    "PostingEndDate": null,
    "LegalEmployerId": 300000008558108,
    "PrimaryLocation": "Arlington, TX, United States",
    "WorkDurationYears": null,
    "WorkplaceTypeCode": "ORA_HYBRID",
    "BeFirstToApplyFlag": false,
    "WorkDurationMonths": null,
    "otherWorkLocations": [],
    "secondaryLocations": [
      {
        "Name": "Fort Worth, TX, United States",
        "Latitude": 33.0173,
        "Longitude": -97.31038,
        "CountryCode": "US",
        "GeographyId": 100000029509610,
        "GeographyNodeId": 100000221362182,
        "RequisitionLocationId": 300000259301203
      },
      {
        "Name": "Irving, TX, United States",
        "Latitude": 32.81352,
        "Longitude": -96.95532,
        "CountryCode": "US",
        "GeographyId": 100000029509305,
        "GeographyNodeId": 100000221362201,
        "RequisitionLocationId": 300000259301204
      }
    ],
    "ShortDescriptionStr": "Serves as a senior cloud incident responder, leading Azure alert investigations and incidents while improving speed, investigative quality, and repeatability across cloud‑native response operations.",
    "requisitionFlexFields": [],
    "DomesticTravelRequired": null,
    "PrimaryLocationCountry": "US",
    "ExternalQualificationsStr": null,
    "ExternalResponsibilitiesStr": null,
    "InternationalTravelRequired": null
  },
  "detail_meta": {
    "url": "https://fa-exvu-saasfaprod1.fa.ocs.oraclecloud.com/hcmRestApi/resources/latest/recruitingCEJobRequisitionDetails?expand=all&onlyData=true&finder=ById;Id=%22260064%22,siteNumber=CX_1",
    "http_status": 200,
    "content_type": "application/json",
    "response_bytes": 17392
  },
  "detail_errors": []
}