Senior Vulnerability Intelligence Analyst

Job Description

The Role

General Motors (GM) is seeking a Senior Vulnerability Intelligence Analyst to join the Cybersecurity team. This strategic role is responsible for proactively identifying analyzing and prioritizing software vulnerabilities that pose risk to GMs systems data and operations. They translate raw vulnerability data into actionable intelligence by assessing which threats are relevant to GMs environment enabling the Vulnerability Management team to patch what matters most faster and with greater precision. Their primary responsibility is to evaluate vulnerabilities based on active threat actor exploitation technical severity and business impact leveraging external intelligence sources and GMspecific context to guide remediation decisions enrich detection logic and reduce GMs overall attack surface.

WhatYoullDo

• Risk Prioritization and Scoring:
  Develop and refine a risk-based prioritization framework by integrating external intelligence sources (e.g. CVE databases threat feeds vendor reports dark web monitoring) to rank vulnerabilities assess exploitability and business impact.

• Patch Tuesday:
  Coordinate and support GMs Patch Tuesday operations providing timely analysis of newly released vendor patches identifying critical vulnerabilities and advising on patching priorities for GMs technology stack.

• Cross-Team Collaboration:
  Partner closely with Vulnerability Management IT Operations Engineering and other stakeholders to ensure effective communication risk mitigation and remediation of prioritized vulnerabilities.

• Threat Intelligence Analysis:
  Conduct in-depth analysis of emerging threats attack vectors and proof-of-concept exploits to determine who is targeting what vulnerabilities and how.

• Reporting and Communication:
  Deliver high-quality intelligence reports executive briefings dashboards and technical alerts tailored for GM leadership technical teams and incident response units.

• Strategic Guidance and Mitigation:
  Advise GM stakeholders on patching priorities compensating controls and risk acceptance decisions ensuring recommendations are aligned with GMs risk appetite and operational requirements.

• Process Improvement:
  Continuously improve GMs vulnerability intelligence processes tools and methodologies to enhance the speed and accuracy of threat identification and response.

• Mentorship and Leadership:
  Serve as a subject matter expert and mentor junior analysts fostering a culture of continuous learning and technical excellence within GMs security team.

• Bachelors degree in Information Security Computer Science or relevant cybersecurity degree

• 4 years of cybersecurity experience with at least 3 years in vulnerability management threat intelligence or security analysis.

• Deep understanding of CVE tracking vulnerability scoring systems (CVSS v3.x) Exploit Prediction Scoring System (EPSS) adversarial TTPs frameworks (MITRE ATT&CK) and the threat landscape.

• Strong knowledge of Windows Linux macOS cloud environments (AWS Azure GCP) and enterprise architecture.

• Proficiency with VM tools (Nessus Tenable Qualys Wiz) SIEM and threat intelligence platforms.

• Exceptional analytical and communication skills.

• Relevant certifications (CISSP CISM GCTI OSCP) preferred.

Key Performance Indicators (KPIs):

• Time-to-identification of critical vulnerabilities relevant to GM.

• Accuracy of vulnerability prioritization and risk assessments.

• Reduction in average time-to-remediation for high-priority risks.

• Quality and timeliness of intelligence reporting and alerts.

About GM

Our vision is a world with Zero Crashes Zero Emissions and Zero Congestion and we embrace the responsibility to lead the change that will make our world better safer and more equitable for all.

Why Join Us

We believe we all must make a choice every day individually and collectively to drive meaningful change through our words our deeds and our culture. Every day we want every employee to feel they belong to one General Motors team.

Benefits Overview

From day one were looking out for your well-beingat work and at homeso you can focus on realizing your ambitions. Learn how GM supports a rewarding career that rewards you personally by visiting Total Rewards resources.

Non-Discrimination and Equal Employment Opportunities (U.S.)

General Motors is committed to being a workplace that is not only free of unlawful discrimination but one that genuinely fosters inclusion and belonging. We strongly believe that providing an inclusive workplace creates an environment in which our employees can thrive and develop better products for our customers.

All employment decisions are made on a non-discriminatory basis without regard to sex race color national origin citizenship status religion age disability pregnancy or maternity status sexual orientation gender identity status as a veteran or protected veteran or any other similarly protected status in accordance with federal state and local laws.

We encourage interested candidates to review the key responsibilities and qualifications for each role and apply for any positions that match their skills and capabilities. Applicants in the recruitment process may be required where applicable to successfully complete a role-related assessment(s) and/or a pre-employment screening prior to beginning employment. To learn more visit How we Hire.

Accommodations

General Motors offers opportunities to all job seekers including individuals with disabilities. If you need a reasonable accommodation to assist with your job search or application for employment email us or call us your email please include a description of the specific accommodation you are requesting as well as the job title and requisition number of the position for which you are applying.