RS/HS Security Engineer

Description

The company is a global leader in secure connectivity for embedded applications, serving the automotive, industrial and IoT, mobile, and communication infrastructure markets. Security is central to its business.

This Americas role supports day-to-day defensive security across IT, operational technology (OT) and R&D, with a focus on threat detection, incident response and exposure management.

You will build and run security strategies against changing cyber threats in varied environments, working with security architects, red teams, product groups and engineering teams. You will also lead regional SOC team members so security operations continue without interruption.

The ideal candidate enjoys operations center work and incident response and can guide a diverse, global team. They also have foundational knowledge of OT manufacturing environments.

Responsibilities

• Work with a regional cybersecurity team on threat detection, monitoring and incident response for IT, OT and R&D.
• Propose and improve SOC processes, including playbooks, automation and alert triage.
• Provide Tier 3 incident response and coordinate regional cyber incident response, driving timely containment, eradication and recovery.
• Work with regional engineering and R&D teams to build security into product development lifecycles.
• Make sure security work meets NIST CSF, IEC 62443 and MITRE ATT&CK for ICS.
• Oversee regional vulnerability assessments and risk management across IT, OT and R&D.
• Guide patch management and compensating controls for systems that cannot be patched directly.
• Work with asset owners on segmentation, access controls and Zero Trust.
• With regional security and risk colleagues, anticipate and reduce risks, keep operations ethical and prepare for upcoming regulations.

Requirements

• 4+ years of cybersecurity experience in blue teaming, security operations and cyber defense.
• 2+ years working with the CrowdStrike Falcon platform.
• Hold at least two certifications from this list: GIAC Associate Certified Incident Handler, GIAC Associate Security Operations Certified, GIAC Security Essentials (GSEC), Associate Certified Cloud Security Professional (CCSP), Certified Information Systems Security Professional (CISSP), CompTIA Security+, CompTIA CySA+, AWS Certified Security, Microsoft SC-200.
• Solid grounding in IT and OT security, including ICS, SCADA and industrial cyber threats.
• Experience securing R&D environments, including embedded systems, proprietary technology and intellectual property.
• Hands-on work with SIEM, EDR, NDR, threat intelligence platforms and security automation.
• Knowledge of MITRE ATT&CK (Enterprise and ICS), NIST 800-82, IEC 62443 and Zero Trust principles.
• Experience leading a cybersecurity team and building operational security teams.
• Basic understanding of cloud security on AWS, Azure and GCP, and of hybrid security architectures.
• Limited experience with controls and frameworks built for ICS/SCADA, industrial IoT and embedded systems in OT environments.

Conditions

This role is onsite five (5) days per week, full-time, from the designated company location.

Remote and hybrid arrangements are not available.

Regular onsite presence is required for incident response, working with operational teams, access to secure environments and business continuity.

Base salary is $135K to $147K a year.

The base pay range for California is $114,400 to $157,300 a year. It is a guideline, and individual pay may vary with qualifications, skill level, location and business needs. It does not apply outside California.

The company is an equal opportunity and affirmative action employer and provides reasonable accommodations for qualified disabled individuals.

Benefits

• Health, dental and vision insurance, 401(k) and paid leave.
• Competitive benefits, plus incentive compensation and/or equity for certain roles.
• Online and offline learning opportunities to build core and professional skills.