Address
Form of workBuild your best future with the Johnson Controls team
As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away!
What we offer
Competitive salary and bonus plan
Paid vacation/holidays/sick time
Comprehensive benefits package including 401K, medical, dental, and vision care - Available day one
Extensive product and on the job/cross training opportunities with outstanding internal resources
Encouraging and collaborative team environment
Dedication to safety through our Zero Harm policy
Check us Out: Day in the Life of the Building of the Future
What you will do
The Cybersecurity Engineer will employ their foundational IT experience, complemented by growing security knowledge, to support the organization in the administration, maintenance, and enhancement of security tools and platforms. This role involves the synergy of SIEM solutions, endpoint detection and response, and a variety of security platforms, ensuring a well-rounded and dynamic security posture
How you will do it
Implementing, supporting, and optimizing security platforms such as EDR, Vulnerability Management, CSPM, CNAPP, SIEM, and other platforms.
Monitor and tune platforms continuously for optimized performance and security.
Troubleshoot platform-related issues affecting internal customers, ensuring minimal disruptions and maximum uptime.
Help in governance of Network Security in areas such a Firewalls, WAF, Secure Gateways, network segmentation, and other areas as part of a Zero Trust architecture.
Assist in globally supporting platforms and their clients, ensuring consistency, reliability, and effectiveness.
Participate in the integration of various platforms into SIEM tools, SOAR, and APIs, ensuring effective security orchestration.
Support internal security projects through documentation, inputs, configuration, and integration into SIEM and other relevant platforms.
Participate in policy and playbook design, especially around endpoint detection and response, optimizing the organization's security posture.
Engage with the Threat Detection team to improve event detections and leverage SIEM insights for a stronger security stance.
Utilize scripting skills for system information retrieval, actions, package deployments across Linux, Windows, and Mac systems
What we look for
A Bachelor’s degree in computer engineering, computer security, computer science, or a related IT field, or a combination of education and experience deemed fit.
2-3 years in IT roles with a demonstrated history of assisting organizations in the ingestion and interpretation of varied information sets.
Proven ability in systems administration, networking, or IT support.
Strong troubleshooting skills complemented by an interest in expanding security competencies.
Effective communication skills, capable of liaising with both IT and business leaders.
Familiarity with SIEM solutions, Endpoint Detection, and Response tools.
Endpoint protection installation and troubleshooting.
Security detection and preventions.
Scripting knowledge: Python, PowerShell, Go, Bash, and others.
Familiarity with SIEM solutions and integration methodologies.
Experience with automation tools and SOAR solutions.
Desired Certifications (not mandatory but a plus)
CompTIA Security+
Splunk Certified User or Splunk Certified Power User
GISF, GSEC
CISSP, CISM
Server Platform Certifications (Microsoft, Linux)
And other foundational certifications related to cybersecurity or networks.
#LI-MJ1
#LI-Remote
