Job Description Summary The Sr Staff Cyber Security Researcher is responsible for delivering controlled threat simulation and services against company assets and partnering with business security teams to drive change. This includes advanced threat replication, Red Team engagements, research, structured attack development, vulnerability research and exploit development / testing, scripting, controlled exploitation of configuration weaknesses and software vulnerabilities, evasion of detection mechanisms and more.

Job Description Roles and Responsibilities

• Partner with business IT security teams to drive improvement in IT security as a result of Red Team engagements 
  
• Lead and execute engagements; defining scope, coordinating attacks, executing tests and reporting findings, following an established methodology in accordance with defined processes 
  
• Conduct adversary simulation to determine if flaws and exposures can be exploited by unfriendly forces 
  
• Research, develop, implement, test and document tools, techniques and tactics used by adversaries to compromise and maintain control of information assets 
  
• Coordinate with other teams in IT Risk in development of threat agent profiles 
  
• Participate in cross-team Task Forces to drive impact of Cyber Security Research findings as appropriate
  
• Actively mentor and develop Cyber Security Researchers
  
• Identify and execute projects to drive simplicity and impact of Cyber Security Research efforts
  
• Maintain relationships with key partners from a technical operations perspective
  

Basic Qualifications

• Bachelor's Degree in Computer Science or a related technical degree and 8 years of professional IT experience (OR Minimum 12 years of professional IT experience)
  
• Minimum 3 years of experience in executing Red Team engagements, penetration tests or threat simulation engagements
  
• Minimum 2 years of experience in scripting or software development
  
• Minimum 2 years of deep, hands-on, technical security experience with at least one of: Wired Network technologies (CISCO routers / switches, Checkpoint), Wireless (WLAN, WIMAX, RFID), Enterprise Storage Systems, UNIX / Linux, Windows / AD, iSeries / zSeries, Database administration, Web applications and Services, Cryptography, Social Engineering and Open Source Intelligence Gathering (OSINT), Mobile platforms, Software Security (Source Code Auditing and Binary Reversing), Systems or OS-native programming (especially Windows), Cloud Administration, Container-based Virtualization
  

Desired Characteristics

• Experience leading Red Team Engagements, penetration testing or threat simulation engagements 
  
• Experience developing exploit code or novel attacks
  
• Experience with the command line in Windows and / or Linux 
  
• Ability to rapidly find, assimilate and synthesize information in pursuit of attacks 
  
• Extreme resourcefulness with willingness to learn and teach how to characterize adversary tools and techniques, assess and test Company resources, and improve Company defenses 
  
• Demonstrated ability to compromise complex IT systems / applications in enterprise environments 
  
• Experience leading threat simulation or penetration testing engagements in an enterprise environment 
  
• Proven vulnerability analysis skills 
  
• Excellent communication skills including both verbal and written 
  
• Hardware / electronics experience 
  
• Strong track record of understanding and interest in current and emerging technologies demonstrated through training, job experience and / or industry activities 
  
• Strong team player - collaborates well with others to solve problems and actively incorporates input from various sources
  
• Demonstrated customer focus - evaluates decisions through the eyes of the customer and can build strong customer relationships 
  
• Change oriented - suggests and implements process improvements; supports and drives change, and confronts difficult circumstances in creative ways 
  
• Ability to read / write foreign languages
  

Additional Information GE offers a great work environment, professional development, challenging careers, and competitive compensation. GE is an  Equal Opportunity Employer . Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, protected veteran status or other characteristics protected by law.

GE will only employ those who are legally authorized to work in the United States for this opening. Any offer of employment is conditioned upon the successful completion of a drug screen (as applicable).

Relocation Assistance Provided: No