Wanted: Incident Handler in Michigan

Do you know how to detect and respond to intruders in a multinational organization? Do you want to join a team with that mission? Are you an experienced information security professional who is looking for a challenge? If your answer to these three questions is yes, please consider applying for the last open Incident Handler role in GE-CIRT. In this role you will mentor intermediate and junior CIRT members and work with some of the best detection and response staff in the world.

The role is located at our Advanced Manufacturing & Software Technology Center in located at Visteon Village, Van Buren Township, Michigan. By the end of the month, 19 of my team (about half of GE-CIRT) will be located there. (I have 2 new hires arriving within the next two weeks.) In addition to normal operations there, our extended team meets at the AMSTC facility regularly for training and planning sessions.

If you would like more information on the role, apply for job 1259804 and I will review your resume. Please read the qualifications carefully -- I'm looking for an experienced person for this role. Thank you.

Tweet

Read More

GE-CIRT Joins FIRST

I am pleased to announce that on Friday 19 March the Forum of Incident Response and Security Teams, or FIRST, accepted the General Electric Computer Incident Response Team, GE-CIRT, as a full member.

This represents about a year of work for us. I am really proud of our team, especially since we reached initial operational capability on 1 January 2009.

I would like to thank James Barlow and Rob Renew for sponsoring our application; Sarah Gori for leading our application process; David Bianco for helping Sarah with technical aspects of the process; and our security team members for assisting with meeting FIRST's criteria.

If you are a member of an incident detection and response team but your team is not part of FIRST, please check out the membership process. I advocated joining FIRST for three reasons:

1. Joining FIRST is a sign to the world that your team has reached a certain level of maturity, stability, and capability.


2. The membership process itself will help focus your team's operations and may help justify process and capability improvements that you may or may not realize you need.


3. FIRST is a community of like-minded professionals with whom you can share information, practices, and lessons that might not be suitable for wider discussions.

When I speak at FIRST 2010 in Miami in June I will describe our membership process and more generally how to build a Fortune 5 CIRT. The conference is open to non-FIRST members, so please consider attending it.

Finally, I am still trying to fill a few of the roles listed here. I am particularly interested in finding a system administrator with FreeBSD and MySQL database experience, for our Information Security Infrastructure Engineer (job 1147859 at www.ge.com/careers). Please consider applying for one of the other roles within GE as well, listed below my jobs. Thank you.

Read More