Cyber Operations Engineer (IR) - Global Industrial

Description

The Cyber Defense Engineer II role works under general supervision across cloud security, identity and access management (IAM), infrastructure protection, cyber recovery, disaster recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention.

Day to day, you carry out cyber defense engineering work within your assigned area.

Responsibilities

• Hunt for threats proactively by forming hypotheses and chasing down anomalies across the environment.
• Turn threat intelligence feeds into hunting priorities and detection improvements.
• Share security operations center monitoring, incident response, and insider risk investigations with the team.
• Help run cyber recovery work and oversee managed services so the team stays covered.
• Write and maintain findings, Standard Operating Procedures (SOPs) and playbooks for threat hunting and detection.
• Join the security on-call rotation when needed.
• Help carry out cyber recovery steps, including operational technology recovery and disaster recovery testing.
• Take on other duties as assigned.

Requirements

• Typically a bachelor's degree in computer science, software engineering, or a related field, plus 3 to 5 years of related experience, or equivalent experience.
• Relevant certifications.
• Hands-on experience with relevant platforms and testing methods.
• Experience running SIEM platforms and analyzing log data.
• Experience with EDR, content filtering, and/or other security toolsets.
• Experience with cyber asset monitoring and technical asset management tools.
• Strong analytical and investigative skills.
• Comfort working in a lean team that shares coverage duties.

Conditions

No supervisory responsibility.

No budget responsibility.

Benefits

• Healthcare coverage options, 401(k), tuition reimbursement, vacation, sick pay and holiday pay.