Senior Cybersecurity Engineer

GM Financial

. Serve as the senior subject matter expert for cloud incident response across Microsoft Azure and Microsoft 365 .

Posted 10/6/2026full-timeArlington • Texas • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cloud incident response, particularly within Microsoft Azure and Microsoft 365, with a strong focus on developing and standardizing incident response processes. Proficient in utilizing advanced tools and methodologies for threat detection, investigation, and response, while effectively communicating findings across various stakeholder levels.

Highest-signal resume keywords

Microsoft Azure Incident ResponseKQL Query OptimizationMicrosoft Defender and Azure SentinelNIST Incident Response Life CycleCloud Security Engineering

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud Incident ResponseKQL Query WritingAzure Activity LogsEntra ID Identity ModelsGraph APIPowerShell AutomationCloud LoggingForensic Artifacts AnalysisData Exfiltration InvestigationPrivilege Management

Soft Skills

Interpersonal CommunicationVerbal CommunicationWritten CommunicationJudgment and RecommendationsMentoring

Tools & Technologies

Microsoft 365 Unified Audit LogDefender TelemetryAzure SentinelMicrosoft CopilotAI Tools Integration

Certifications & Qualifications

CISSPCCNP-SecurityGIACCEHCPTS

Industry Keywords

CybersecurityInformation SecurityNetwork EngineeringIncident ResponseMITRE ATT&CK Framework

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Serve as the senior subject matter expert for cloud incident response across Microsoft Azure and Microsoft 365
Lead high-impact investigations involving identity compromise, privilege escalation, persistence, data exfiltration, and abuse of cloud services
Act as the senior escalation point for complex cloud investigations, providing investigative direction and response strategy
Perform investigations using Azure Activity Logs, Entra ID logs, Microsoft 365 Unified Audit Log, Defender telemetry, and related forensic artifacts
Develop and standardize cloud-specific incident response playbooks
Stay current with evolving attack techniques and security technologies
Design, build, and continuously refine cloud detections and alerts across Azure and Microsoft 365
Mentor responders
Participate in an on-call rotation as needed for incidents outside standard business hours
Improve the speed, quality, and repeatability of cloud incident response operations

Requirements

What you’ll need

Extensive hands-on experience responding to security incidents in Microsoft Azure and/or Microsoft 365
Functional knowledge of Microsoft Defender, Azure Sentinel, and underlying Azure architecture
Strong understanding of Azure tenant and subscription architecture, Entra ID identity models, roles, conditional access, and privilege management
Deep familiarity with cloud logging, telemetry sources, and forensic artifacts
Advanced experience writing and optimizing KQL queries for investigation and threat hunting across Defender data sources
Ability to use Graph API, PowerShell, and automation to acquire evidence, investigate at scale, and accelerate response actions
Familiarity with Microsoft Defender and Wiz
Strong knowledge of the NIST Incident Response Life Cycle and MITRE ATT&CK Framework
Experience translating investigations into repeatable response processes, documentation, and improvement opportunities
Background in cloud security engineering, architecture, or senior-level incident response with significant cloud exposure
Ability to communicate across multiple stakeholder levels
Ability to document and summarize technical evidence and findings
Good interpersonal, verbal, and written communication skills
Ability to exercise prudent judgment and offer knowledgeable recommendations
3–5 years of experience in large and complex business environments preferred
3–5 years of experience in Cybersecurity, Information Security, Network Engineering, Network Operations, Information Technology, or Application Development preferred
High School Diploma or equivalent required
Bachelor’s Degree in a related field or equivalent work experience strongly preferred
Security-related certifications such as CISSP, CCNP-Security, GIAC, CEH, or CPTS highly preferred
Ability to use AI tools such as Microsoft Copilot
Ability to evaluate AI outputs for accuracy, compliance, and bias
Experience integrating AI into workflows
Familiarity with AI-assisted research, summarization, and content generation
Understanding of responsible AI use, ethics, and data protection
Experience with AI-assisted software development or automation
Knowledge of prompting techniques
Awareness of emerging GenAI capabilities and limitations
Must not require visa sponsorship

Benefits

Comp & perks

401K matching
Bonding leave for new parents: 12 weeks, 100% paid
Tuition assistance
Training
GM employee auto discount
Community service pay
Nine company holidays
Bonus eligibility