Position SummaryAs a Cybersecurity Engineer, you will be responsible for implementing, and maintaining the organization's cybersecurity infrastructure, ensuring the highest levels of protection against cyber threats. Additionally, you will oversee systems that monitor, detect, and respond to security incidents.
Role and ResponsibilitiesHere's What You'll Be Responsible For:Threat DetectionA Cyber Security Engineer responsible for Threat Detection focuses on identifying malicious activity as early as possible, analyzing security events, and improving an organization's ability to detect cyber threats before they cause damage. This role typically spans security monitoring, detection engineering, threat hunting, and incident response.
Incident Investigation and Analysis.A Cyber Security Engineer responsible for Incident Investigation and Analysis focuses on determining what happened, how it happened, what systems were affected, and how to contain and prevent future incidents. This role requires a combination of technical analysis, digital forensics, malware analysis, and collaboration with incident response teams.
-Validate whether an alert represents a true security incident.
-Classify incidents (e.g., malware, phishing, insider threat, ransomware).
-Determine severity and scope.
-Identify affected users, systems, and data.
-Escalate high-priority incidents to the incident response team.
Monitoring and Alert Management. A Cyber Security Engineer responsible for Monitoring and Alert Management ensures continuous visibility into an organization's IT environment by collecting, monitoring, and analyzing security events. The goal is to detect potential threats quickly, reduce false positives, and ensure that genuine security incidents are investigated and resolved efficiently.
-Endpoints (Windows, Linux, macOS)
-Servers and virtual machines
-Active Directory and Identity Providers
-Network devices (Firewalls, Routers, Switches)
-Cloud environments (AWS, Azure, Google Cloud)
-Kubernetes clusters and containers
-SaaS applications (Microsoft 365, Salesforce, ServiceNow)
-Databases
-VPN gateways
-Email security systems
Incident Response. A Cyber Security Engineer responsible for Incident Response focuses on preparing for, detecting, containing, eradicating, recovering from, and documenting cybersecurity incidents. The role requires collaboration across Security Operations (SOC), IT Infrastructure, Cloud, Networking, Legal, and Business teams to minimize the impact of security incidents and improve the organization's security posture.
-Monitor security alerts from SIEM, EDR, IDS/IPS, firewalls, cloud platforms, and email security gateways.
-Validate alerts to distinguish true positives from false positives.
-Determine the scope, severity, and business impact of incidents.
-Classify incidents (e.g., malware, ransomware, phishing, insider threats, data exfiltration, DDoS).
-Escalate critical incidents according to the incident response plan.
Documentation. A Cyber Security Engineer responsible for Documentation creates, maintains, and improves security documentation that supports security operations, incident response, compliance, governance, and technical implementations. High-quality documentation ensures that security processes are repeatable, auditable, and easily understood by technical teams, auditors, and management.
Scanning external media devices for threats.A Cyber Security Engineer responsible for Scanning External Media Devices for Threats ensures that removable media (such as USB flash drives, external hard drives, CDs/DVDs, SD cards, smartphones, and other portable storage devices) are scanned, validated, and secured before they are allowed to connect to enterprise systems. This helps prevent malware infections, ransomware, unauthorized data transfer, and other threats introduced through removable media.
-Define removable media security policies.
-Restrict unauthorized USB devices.
-Allow only approved encrypted storage devices.
-Prevent unauthorized data transfers.
-Enforce least-privilege access for removable media.
-Maintain an inventory of approved external devices.
Skills and QualificationsHere's what you'll need:- Bachelor's degree in Cybersecurity, Computer Science or related field.
- Security certification is a plus.
- 2- 4 years of experience in Cyber Security.
- Experience in, or eager to learn, system-engineering disciplines such as networking, Linux, and Windows Server administration.
The current base salary range for this role is between $76,000 - $110,000. Individual base pay rates will depend on factors including duties, work location, education, skills, qualifications and experience. Total compensation for this position will include a competitive benefits package and may include participation in company incentive compensation programs, which are based on factors to include organizational and individual performance.
Total RewardsAt Samsung Austin Semiconductor, base pay is just one part of our total compensation package. The base compensation for this role will depend on education, experience, skills, and location.
We offer a comprehensive benefits package, including:
- Medical, dental, and vision insurance
- Life insurance and 401(k) matching with immediate vesting
- Onsite café(s) and workout facilities
- Paid maternity and paternity leave
- Paid time off (PTO) + 2 personal holidays and 10 regular holidays
- Wellness incentives and MORE
Eligible full-time employees (salaried or hourly) may also receive MBO bonuses based on company, division, and individual performance.
All positions at Samsung Austin Semiconductor are full-time on-site.
U.S. Export Control ComplianceThis role may require access to information subject to U.S. export control laws. Applicants must be authorized to access such information or eligible for government authorization.
Trade Secrets Notice By submitting an application, you agree not to disclose to Samsung-or encourage Samsung to use-any confidential or proprietary information (including trade secrets) belonging to a current or former employer or other entity.
