IT Security Analyst

Working as part of the Security Operations Team, the Security Analyst helps build, maintain and optimize security tools, develop detection capabilities, and drive automation to improve response efficiency. The position plays a key role in strengthening BorgWarner’s overall security posture in a continuously evolving threat landscape. The Security Analyst supports BorgWarner’s global cybersecurity operations by detecting, analyzing, and responding to security threats across the enterprise. This role ensures the integrity and protection of systems and data through multilayered security tooling, continuous monitoring and incident response., * On a day-to-day basis respond to, remediate, and coordinate incident response actions with other stakeholders, both internal and external

• Monitor security alerts and logs from SIEM and other securing alerting tools

• Creates searches and necessary reports to prevent disruption or unavailability of information assets and assess the impact

• Analyses security attacks and decides and or advises ways to solve them by configuring new security tools

• Use AI-powered security operations platforms to investigate, correlate, and triage security events.

• Develop, validate, and optimize AI-assisted detection and response workflows.

• Evaluate AI-generated findings and ensure accuracy through analyst verification.

• Partner with engineering teams to automate investigation and response processes using agentic workflows.

• Develop and maintain technical runbooks and process documents

• Conduct in-depth analysis of suspicious activities and attempted attacks, during and post incident through and not limited to the analysis of malware, packets, alerts and logs for signs of malicious activity

• Monitor and investigate security events across cloud platforms and SaaS applications

• Investigate identity-based attacks, account compromise, MFA bypass attempts, and privilege escalation events

• Stay current with incident response technology, methodology and legal requirements

• Develop scripts and automation to streamline security operations tasks

• Ensure that all investigations are performed in-line with regulatory requirements and internal corporate policies, standards and procedures

• Provide metrics for management and periodic intelligence reports and lessons learned on various threat actors and IOCs

• Build upon existing capabilities through continuous improvement of relevant intelligence sources and methods, recommending new tools and procedures to detect threats and protect intellectual property and assets

• Maintain and optimize security tools such as endpoint protection, EDR, DLP, and Email Security

• Assist in support of formal investigations and/or inquiries to resolve insider threat related matters, acceptable use policy violations

• Identify areas for improvement in internal processes along with possible solutions

• Work with the Security Operations Lead to define and document standard operating procedures for security incident handling, malware analysis, vulnerability management etc.

• Maintains the confidentiality related to the professional secret and the security of the documents manipulated and administrated by him / her, Responsibilities Provide daily end-user support, including troubleshooting hardware, software, and networking issues. Administer and maintain Microsoft Active Directory (users,…
• 2 months ago +

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field

• 2+ years of experience in IT Security, with a focus on Incident Response and security operations
• Strong understanding of security principles, threat landscapes, and incident response
• Experience with SIEM, EDR, DLP, VM, Email Security, and Threat Intelligence platforms
• Relevant certifications (e.g., Sec+, GSEC, GCIA, CEH, CISSP) are preferred
• Foreign languages: Fluent in English, written and verbal
• Deep understanding of security systems, firewalls, authentication systems, log management, content filtering, network security and networking technologies
• Has worked with and managed at least one of the following technologies: SIEM, EDR, DLP, VM, Email Security
• Proven knowledge in the following security disciplines: advanced threats, information security incident detection and response, forensic investigative practices
• Experience in developing, collecting and analyzing threat intelligence
• Experience in AI and autonomous response
• Experience in cyber intelligence analytic methodologies such as Kill Chain, threat modelling, threat hunting
• Relevant experience in an international environment
• Identifying problems; recognizing significant threats and risks; making connections between data;
• Tracing possible causes of problems; investigating relevant data
• Upholding generally accepted social and ethical standards in job-related activities
• Strong written, oral and presentation skills

World Headquarters - Auburn Hills, MI, USA, BorgWarner is a global product leader in delivering innovative and sustainable mobility solutions. We are a company of innovators and independent thinkers that brings together talented employees, meaningful work and amazing technology in a unique environment. At BorgWarner, we constantly work towards our vision of a clean and energy-efficient world. Our Culture BorgWarner promotes and nurtures a diverse and inclusive environment, honors integrity, strives for excellence, commits to responsibility for our communities and the environment, and builds on the power of collaboration. We believe the health and safety of our employees are a top priority. Career Opportunities We manage talent as seriously as we manage our businesses and encourage you to learn about our proud history, strong culture, technologies, and vision for the future. We offer positions locally and globally with over 80 locations in 19 countries.