Security Operations Analyst

Security Operations Analyst - CNH Industrial

Direct Hire Role

Through its people and brands, CNH Industrial delivers power, technology, and innovation to farmers and builders all around the world. Each of its brands, including Case IH, New Holland Agriculture, Case and New Holland Construction, FPT Industrial, Capital, and Aftermarket Solutions, is a major international force in its specific sector. The CNH Industrial Cyber Defense Team manages the security threats and vulnerabilities across all aspects of CNH s business. With a state-of-the-art Global Cyber Fusion Center located in Sioux Falls, you will be operating and growing a foundational Cyber Defense capability for enterprise and operational technologies - technologies that support plant operations and manufacturing equipment that enable delivery of CNH vehicles, equipment, and products.

We are seeking a bias-towards-action, results-oriented, motivated, and engaged analyst who is focused on building processes and technologies that optimize the security posture for our organization.

In this role you will:

Analyze, triage, and manage incidents end-to-end based on business impact and applicable legal, privacy, and regulatory requirements

Utilize extensive data sources and a wide range of enterprise-level tools to identify risk indicators, determine root causes, and recommend preventative actions

Execute rapid response and containment tactics on global cyber incidents, engaging partner teams to analyze, respond, and recover from cyber incidents

Develop and implement automations, workflows, and playbooks to provide enrichments and enhance incident response capabilities

Maintain an up-to-the-minute awareness and detailed understanding of modern and emerging threats vulnerabilities, especially as they relate the agriculture and manufacturing space

Requirements and Qualifications

3-5 years of experience in information security, cyber defense, cyber engineering, or other related cyber security domain

Relevant technical certification(s) (GSEC, CISSP, SEC+, etc.) and/or the desire to pursue additional certifications as required

Excellent communication (written and verbal) and organizational skills

Excellent problem solving and critical/creative thinking skills

Familiarity with various SIEM and EDR platforms, including automation capabilities, workflow and playbook development, and containment and remediation capabilities native to standard SIEM and EDR practices

A high degree of dependability and the ability to manage multiple projects under strict timelines in a dynamic, high-pressure environment