JOB PURPOSEPHINIA is seeking an IT Security Engineer to support the design, implementation, monitoring, and improvement of PHINIA's security controls across infrastructure, networks, endpoints, and cloud environments. This role ensures the secure operation of PHINIA's IT systems by conducting security testing, responding to incidents, executing vulnerability remediation, and supporting enterprise security initiatives. The engineer will work closely with infrastructure, networking, applications, and managed security partners to protect PHINIA from cyber threats and support ongoing security enhancements. This is a hybrid position and candidates will be expected to be in office at least 3 days per week.
KEY RESPONSIBILITIESKey Responsibilities- Monitor and maintain PHINIA's enterprise security controls across endpoint protection (EDR/XDR), email security, vulnerability management, identity security, and SIEM/SOC platforms, ensuring continuous threat visibility and protection.
- Conduct regular security assessments, configuration baselines, system hardening checks, and coordinate remediation activities with infrastructure, cloud, and application teams.
- Support security incident response, including alert triage, investigation, containment, eradication, and detailed root-cause analysis with follow-up improvements.
- Review and enhance existing security controls, policies, and configurations to strengthen PHINIA's Zero Trust posture, cloud readiness, and resilience against advanced threats.
- Perform log analysis and alert validation across SIEM/XDR/Defender platforms; verify findings from managed security service providers (SOC/MSSP) and ensure proper escalation and closure.
- Assist in vulnerability scanning, patch validation, configuration drift checks, and lifecycle follow-up activities across infrastructure, applications, and cloud workloads.
- Support enforcement of secure access protocols such as MFA, Conditional Access, role-based access control, privileged access governance (PIM/JIT) and secure configuration baselines.
- Maintain and update security documentation including standards, architecture diagrams, SOPs, runbooks, incident playbooks, and forensic guidelines.
- Collaborate with infrastructure, network, cloud, and application teams to ensure secure system design, secure-by-default configurations, and alignment to PHINIA cybersecurity standards.
- Participate in DR/BCP testing, breach simulations, tabletop exercises, and resilience drills, contributing to scenario planning and response readiness.
- Support evaluation, onboarding, and operationalization of new security tools, automation capabilities, SOAR workflows, and detection technologies.
- Work closely with SOC, EDR, DLP, email security, and managed detection partners to ensure strong, continuous, and effective security operations across global sites.
- Identify recurring security issues, propose optimization opportunities, improve detection logic, and support the rollout of security awareness and hygiene initiatives across PHINIA.
- Contribute to security automation initiatives (PowerShell, Python, KQL, SOAR playbooks) to reduce manual effort, improve response time, and enhance detection accuracy
What we're looking for- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
- 3+ years of experience in IT security, cybersecurity operations, or IT risk management.
- Solid understanding of cybersecurity fundamentals: network security, endpoint protection, authentication, encryption, security protocols, and hardening standards
- Hands-on experience across security operations, including Endpoint Detection & Response (CrowdStrike or similar), email security (Proofpoint), Data Loss Prevention (DLP), vulnerability management platforms (Qualys, Rapid7, Tenable), and SIEM/SOC alert investigation
- Familiarity with Zero Trust concepts, identity governance, MFA, Conditional Access, and modern authentication protocols (OAuth/SAML).
- Good working knowledge of infrastructure, Windows/Linux OS, network basics, and cloud environments (Azure preferred).
- Experience working within ITIL-driven environments and following structured Incident/Problem/Change processes
- Security+ (CompTIA) - preferred
- CYSA+ or PenTest+ - nice to have
- AZ-500: Microsoft Azure Security Engineer - plus
- CCSP or CISSP Associate - preferred for modern cloud/hybrid environments
