Director - Cyber Security

Job Description Summary

The Director – Cyber Security is accountable for providing strategic leadership for the GE Aerospace Cybersecurity Response Team (GCRT). This role is responsible for leading a global team of cybersecurity SOC analysts and incident responders to triage alerts and notables, detect and analyze potential cybersecurity threats, and contain and remediate cybersecurity incidents. This role manages the strategy for working with Managed Detection and Response (MDR) partners and is focused on continuous improvement to increase performance against KRIs and KPIs.

Job Description

Roles and Responsibilities:

In this role, the Director – Cyber Security leading the Global Cybersecurity Response Team (GCRT) will:

• Define and execute the global SOC and incident response strategy, aligned to enterprise risk, regulatory requirements, and business priorities to identify and mitigate cybersecurity threats
• Lead 24x7 SOC operations across regions, ensuring consistent detection, triage, containment, and recovery processes with clear escalation paths
• Design and develop incident response capabilities to increase effectiveness, integrating across architecture, detection engineering, SIEM, SOAR, endpoint, network, cloud, identity, email, OTN, and other platforms
• Lead major incident response efforts with some nontraditional working hours including technical actions to contain and remediate cybersecurity incidents and complete forensic investigations
• Operate a hybrid SOC model with clear roles and responsibilities while managing performance oversight and accountability of strategic MDR partners and incident response service providers
• Benchmark program capabilities against industry standards and peer organizations and ensure compliance with relevant regulations and standards for data protection and cybersecurity.
• Stay informed with the latest trends and technologies in cybersecurity to continuously enhance the organization's defenses.
• Recruit, develop, and retain global talent, offering feedback and growth opportunities; establish on-call rotations, training, certifications, and career paths to strengthen team capability
• Manage team deliverables, setting goals and priorities throughout the year, and manage budgets related to scope of team
• Communicate effectively both within immediate team and GE leadership. Ensure team receives consistent messages and has clear understanding of business direction, strategy and results
  
  

Education Qualification

Bachelor’s degree from accredited university or college with minimum of 8 years of professional experience OR associate’s degree with minimum of 11 years of professional experience OR High School Diploma with minimum of 13 years of professional experience

Minimum 5 years of professional experience in Cybersecurity Incident Response or Digital Technology (DT)

Note: Military experience is equivalent to professional experience

Eligibility Requirement

• Legal authorization to work in the U.S. is required. We will not sponsor individuals for employment visas, now or in the future, for this job.
• This role requires the successful candidate to maintain a US Government Security Clearance; prerequisite for a security clearance is U.S. Citizenship. Preference will be given to candidates who currently hold US Government Security Clearance.
  
  

Desired Characteristics

• Knowledge of aerospace and defense industries or GE Aerospace enterprise and cyber threats
• Deep knowledge of cybersecurity threat detection, APT and cyber-crime threat actors, and cybersecurity frameworks, tools, and technologies
• Prior experience in leading SOC or CIRT teams, cybersecurity incident response or investigations, and data forensics
• Experience with a SIEM, SOAR, and threat detection across multiple attack surfaces including endpoint, network, cloud, identity, email, and OT
• Familiarity with DoD and CMMC security and regulatory requirements
• Understanding of Intelligence Driven Defense concepts including the MITRE ATT&CK Framework, and tactics, techniques, and procedures (TTPs) related to detecting potential cybersecurity threats
• Proven ability to lead, mentor, and inspire a team of cybersecurity professionals
• Ability to solve very complex security issues that span legal, compliance and regulatory obligations
• Demonstrated thought leader, delivering new, supporting innovation solutions to exceed customer expectations
• Excellent interpersonal, written / verbal communication and leadership skills with the ability to quickly build credibility, influence and make recommendations across all levels and business functions
• Demonstrated experience embracing “team of teams” way of working and ability to work in a dynamic, fast paced environment with limited direction
• Focuses on continuous improvement and problem solving to enhance program capabilities process improvements, champion and drive change initiatives, confront difficult circumstances in creative ways, balance multiple and competing priorities and execute accordingly
  
  

This role requires access to U.S. export-controlled information. Therefore, employment will be contingent upon the ability to prove that you meet the status of a U.S. Person as one of the following: U.S. lawful permanent resident, U.S. Citizen, have been granted asylee or refugee status (i.e., a protected individual under the Immigration and Naturalization Act, 8 U.S.C. 1324b(a)(3)).

Additional Information

GE Aerospace offers a great work environment, professional development, challenging careers, and competitive compensation. GE Aerospace is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE Aerospace will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

Relocation Assistance Provided: No

• This is a remote position