Security Operations Engineer

Security Operations Engineer, Cyber Defense - CNH Industrial

Through its people and brands, CNH Industrial delivers power, technology, and innovation to farmers and builders all around the world. Each of its brands, including Case IH, New Holland Agriculture, Case and New Holland Construction, FPT Industrial, Capital, and Aftermarket Solutions, is a major international force in its specific sector. The CNH Industrial Cyber Defense Team manages the security threats and vulnerabilities across all aspects of CNH s business. With a state-of-the-art Global Cyber Fusion Center located in Sioux Falls, you will be operating and growing a foundational Cyber Defense capability for enterprise and operational technologies - technologies that support plant operations and manufacturing equipment that enable delivery of CNH vehicles, equipment, and products.

We are seeking a bias-towards-action, results-oriented, motivated, and engaged engineer who is focused on building processes and technologies that optimize the security posture for our organization.

In this role you will:

Analyze, triage, and manage incidents end-to-end based on business impact and applicable legal, privacy, and regulatory requirements

Utilize extensive data sources and a wide range of enterprise-level tools to identify risk indicators, determine root causes, and recommend preventative actions

Take ownership of one or more key Cyber Defense platforms, maintaining associated infrastructure, enhancing functionality, and increasing efficiency in accordance with continuous improvement principles

Execute rapid response & containment tactics on global cyber incidents, engaging partner teams to analyze, respond, and recover from cyber incidents

Develop and implement automations, workflows, and playbooks to provide enrichments and enhance incident response capabilities

Act as a subject matter expert in the realm of Cyber Defense, advising teams comprised of individuals of varying levels of technical experience, and mentoring junior security analysts by providing both technical and professional guidance

Maintain an up-to-the-minute awareness and detailed understanding of modern and emerging threats & vulnerabilities, especially as they relate the agriculture and manufacturing space

Requirements & Qualifications

5+ years of experience in information security, cyber defense, cyber engineering, or other related cyber security domain

o Note: A four-year degree from an accredited college or university in a related field (e.g. computer science, cyber security, information systems or technology, or science, engineering, or math disciplines) may substitute for up to two years of required experience.

Expert-level knowledge of various SIEM and EDR platforms, including extensive experience with automation, workflow and playbook development, and containment and remediation capabilities native to standard SIEM and EDR practices

Relevant technical certification(s) (GSEC, CISSP, SEC+, etc.) and/or the desire to pursue additional certifications as required

Excellent communication (written and verbal) and organizational skills

Excellent problem solving and critical/creative thinking skills

A high degree of dependability and the ability to manage multiple projects under strict timelines in a dynamic, high-pressure environment