Cyber Operations Engineer (IR) - Global Industrial

Under general supervision the Cyber Defense Engineer II will work across cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. This role executes day-to-day Cyber Defense Engineering activities within their assigned domain., * Supports proactive threat hunting activities, forming hypotheses and investigating anomalies across the environment.

• Consumes and operationalizes threat intelligence feeds, translating findings into hunting priorities and detection improvements.
• Participates in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage.
• Supports cyber recovery execution and managed service oversight as needed to ensure team-wide coverage.
• Documents and maintains findings, Standard Operating Procedures (SOPs) and playbooks for threat hunting and detection processes.
• Participates in the security on-call rotation as needed.
• Supports execution of cyber recovery activities, including operational technology recovery procedures and disaster recovery testing exercises.
• performs other duties as assigned.

• Typically requires a bachelor’s degree in computer science, software engineering, or a related field and three (3) to five (5) years of related experience or equivalent experience., * Relevant certifications.
• Experience with relevant platforms and testing methodologies.
• Experience operating SIEM platforms and analyzing log data.
• Experience with EDR, content filtering, and/or other security toolsets.
• Experience with cyber asset monitoring and technical asset management tools.
• Strong analytical and investigative skills.
• Comfortable operating in a shared-coverage, lean team environment.