Senior Vulnerability Intelligence Analyst

Description

The Role

General Motors (GM) is seeking a Senior Vulnerability Intelligence Analyst to join the Cybersecurity team. This strategic role is responsible for proactively identifying, analyzing, and prioritizing software vulnerabilities that pose risk to GM's systems, data, and operations. They translate raw vulnerability data into actionable intelligence by assessing which threats are relevant to GM's environment, enabling the Vulnerability Management team to patch what matters most, faster and with greater precision. Their primary responsibility is to evaluate vulnerabilities based on active threat actor exploitation, technical severity, and business impact leveraging external intelligence sources and GM-specific context to guide remediation decisions, enrich detection logic, and reduce GM's overall attack surface.

What You'll Do

• Risk Prioritization and Scoring:
  Develop and refine a risk-based prioritization framework by integrating external intelligence sources (e.g., CVE databases, threat feeds, vendor reports, dark web monitoring) to rank vulnerabilities, assess exploitability and business impact.
• Patch Tuesday:
  Coordinate and support GM's Patch Tuesday operations, providing timely analysis of newly released vendor patches, identifying critical vulnerabilities, and advising on patching priorities for GM's technology stack.
• Cross-Team Collaboration:
  Partner closely with Vulnerability Management, IT Operations, Engineering, and other stakeholders to ensure effective communication, risk mitigation, and remediation of prioritized vulnerabilities.
• Threat Intelligence Analysis:
  Conduct in-depth analysis of emerging threats, attack vectors, and proof-of-concept exploits to determine who is targeting what vulnerabilities and how.
• Reporting and Communication:
  Deliver high-quality intelligence reports, executive briefings, dashboards, and technical alerts tailored for GM leadership, technical teams, and incident response units.
• Strategic Guidance and Mitigation:
  Advise GM stakeholders on patching priorities, compensating controls, and risk acceptance decisions, ensuring recommendations are aligned with GM's risk appetite and operational requirements.
• Process Improvement:
  Continuously improve GM's vulnerability intelligence processes, tools, and methodologies to enhance the speed and accuracy of threat identification and response.
• Mentorship and Leadership:
  Serve as a subject matter expert and mentor junior analysts, fostering a culture of continuous learning and technical excellence within GM's security team.

• Bachelor's degree in Information Security, Computer Science, or relevant cybersecurity degree
• 4+ years of cybersecurity experience, with at least 3 years in vulnerability management, threat intelligence, or security analysis.
• Deep understanding of CVE tracking, vulnerability scoring systems (CVSS v3.x+), Exploit Prediction Scoring System (EPSS), adversarial TTPs, frameworks (MITRE ATT&CK), and the threat landscape.
• Strong knowledge of Windows, Linux, macOS, cloud environments (AWS, Azure, GCP), and enterprise architecture.
• Proficiency with VM tools (Nessus, Tenable, Qualys, Wiz), SIEM, and threat intelligence platforms.
• Exceptional analytical and communication skills.
• Relevant certifications (CISSP, CISM, GCTI, OSCP) preferred.

• Time-to-identification of critical vulnerabilities relevant to GM.
• Accuracy of vulnerability prioritization and risk assessments.
• Reduction in average time-to-remediation for high-priority risks.
• Quality and timeliness of intelligence reporting and alerts.