The IT Security Detection Engineer operates as a multi-disciplinary engineer within the Security Operations Team at BorgWarner. This role will employ various skills and experience to drive incident detection, optimization, and resolution. On a daily basis, the Information Security Engineer collects, reviews, interprets, correlates and analyses data during and post incident in order to create a comprehensive picture of any potential threat. Performs activities combining analytic and design skills with adequate knowledge of software and hardware technologies, in order to define, design, create, test, implement and modify informatic systems which have software as a main component.Key responsibilities<ul><li>Developing and maintaining detection rules to identify malicious or suspicious activity within the environment.</li><li>Implementing and managing systems for real time threat detection and alerting.</li><li>On a day-to-day basis responding to, remediating, and coordinating incident response actions with other stakeholders, both internal and external.</li><li>Proactively searching for threats and vulnerabilities within the network</li><li>Developing and maintaining log collection systems such as a SIEM and/or Data Lake for long term data retention and normalization</li><li>Developing and maintaining automation platforms within the security operations tool offering to optimize automated responses where possible</li><li>Working with other IT and IT Security teams to ensure comprehensive threat coverage and understanding of impact and criticality</li><li>Creating scripts and necessary reports to prevent disruption or unavailability of information assets and assess the impact.</li><li>Analysing security attacks and advised on ways to solve them by configurating the existing security systems.</li><li>Defining and implementing information assets that have software as the main component in order to improve the security posture.</li><li>Developing and maintaining technical runbooks and process documentation.</li><li>Conducting in-depth analysis of suspicious activities and attempted attacks, during and post incident through and not limited to the analysis of malware, packets, alerts and logs for signs of malicious activity.</li><li>Staying current with security operations, data analysis, and incident response technology, methodology and legal requirements.</li><li>Performing computer forensic &amp; incident investigations when required.</li><li>Ensuring that all investigations are performed in-line with regulatory requirements and internal corporate policies, standards and procedures.</li><li>Providing metrics for management and periodic intelligence reports and lessons learned on various threat actors and IOCs.</li><li>Building upon existing capabilities through continuous improvement of relevant intelligence sources and methods, recommending new tools and procedures to detect threats and protect intellectual property and assets.</li><li>Assisting in support of formal investigations and/or inquiries to resolve insider threat related matters, acceptable use policy violations.</li><li>Identifying areas for improvement in internal processes along with possible solutions.</li><li>Working with the IT Security Operations Lead to define and document standard operating procedures for security incident handling, malware analysis, vulnerability management etc.</li><li>Maintaining the confidentiality related to the professional secret and the security of the documents manipulated and administrating by him / her.</li></ul>What we’re looking for<ul><li>Bachelor’s degree in Security Management; Compliance or Computer Science or comparable course of studies</li><li>2+ years of experience in IT Security, with a focus on Incident Response and SOC Any of the following: Comptia Security+, SANS Certification, OffSec Certification</li><li>Foreign languages: Fluent in English, written and verbal</li></ul>Key Job Skills and or competencies<ul><li>Deep understanding of security systems, firewalls, authentication systems, log management, content filtering, network security and networking technologies</li><li>Has worked with and managed at least one of the following technologies: SIEM, SOAR, Data Lake, EDR, DLP, FW, IDS/IPS</li><li>Proven knowledge in the following security disciplines : advanced threats, information security incident detection and response, forensic investigative practices</li><li>Experience in developing, collecting and analysing threat intelligence</li><li>Experience with rule-driven and analysis-driven incident response platforms</li><li>Experience in AI and LLM models</li><li>Experience in cyber intelligence analytic methodologies such as Kill Chain, threat modelling, threat hunting</li><li>Relevant experience in an international environment with globally distributed teams</li><li>Identifying problems; recognizing significant threats and risks; making connections between data</li><li>Tracing possible causes of problems; investigating relevant data</li><li>Upholding generally accepted social and ethical standards in job-related activities</li><li>Strong written, oral and presentation skills</li></ul>Internal Use Only: SalaryGlobal Terms of Use and Privacy Statement Carefully read the BorgWarner Privacy Policy before using this website. Your  ability to access and use this website and apply for a job at BorgWarner are conditioned on your acceptance and compliance with these terms.Please access the linked document by clicking <a href="https://www.borgwarner.com/legal/privacy-policy-for-online-applications">here</a><a href="http://multimedia.3m.com/mws/media/1274940O/3m-jobs-country-data-privacy-statements-external.pdf">,</a> select the geographical area where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the terms.Career Scam Disclaimer:  BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website.  To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner.  Applicants should never provide their national ID numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online.  Job applicants are invited to contact BorgWarner through BorgWarner’s website to verify the authenticity of any employment opportunities.

As a global product leader for over 130 years, we deliver innovative and sustainable mobility solutions. Guided by our commitment to inclusion, integrity, excellence, responsibility and collaboration&mdash;and our pledge to reach carbon neutrality by 2035&mdash;we&rsquo;re leading the automotive industry to a future that is cleaner, healthier and safer for all.
Start your future with BorgWarner now! We are looking for dedicated, talented people to fill our manufacturing and technical facilities all over the world. For more information, please visit: https://bit.ly/WorkAtBorgWarner
For legal and data protection inquiries please visit: https://www.borgwarner.com/legal
Career Scam Disclaimer BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner. Applicants should never provide their Social Security numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact BorgWarner through BorgWarner&rsquo;s website to verify the authenticity of any employment opportunities.

IT Security Detection Engineer

The IT Security Detection Engineer operates as a multi-disciplinary engineer within the Security Operations Team at BorgWarner. This role will employ various skills and experience to drive incident detection, optimization, and resolution. On a daily basis, the Information Security Engineer collects, reviews, interprets, correlates and analyses data during and post incident in order to create a comprehensive picture of any potential threat. Performs activities combining analytic and design skills with adequate knowledge of software and hardware technologies, in order to define, design, create, test, implement and modify informatic systems which have software as a main component.Key responsibilities<ul><li>Developing and maintaining detection rules to identify malicious or suspicious activity within the environment.</li><li>Implementing and managing systems for real time threat detection and alerting.</li><li>On a day-to-day basis responding to, remediating, and coordinating incident response actions with other stakeholders, both internal and external.</li><li>Proactively searching for threats and vulnerabilities within the network</li><li>Developing and maintaining log collection systems such as a SIEM and/or Data Lake for long term data retention and normalization</li><li>Developing and maintaining automation platforms within the security operations tool offering to optimize automated responses where possible</li><li>Working with other IT and IT Security teams to ensure comprehensive threat coverage and understanding of impact and criticality</li><li>Creating scripts and necessary reports to prevent disruption or unavailability of information assets and assess the impact.</li><li>Analysing security attacks and advised on ways to solve them by configurating the existing security systems.</li><li>Defining and implementing information assets that have software as the main component in order to improve the security posture.</li><li>Developing and maintaining technical runbooks and process documentation.</li><li>Conducting in-depth analysis of suspicious activities and attempted attacks, during and post incident through and not limited to the analysis of malware, packets, alerts and logs for signs of malicious activity.</li><li>Staying current with security operations, data analysis, and incident response technology, methodology and legal requirements.</li><li>Performing computer forensic &amp; incident investigations when required.</li><li>Ensuring that all investigations are performed in-line with regulatory requirements and internal corporate policies, standards and procedures.</li><li>Providing metrics for management and periodic intelligence reports and lessons learned on various threat actors and IOCs.</li><li>Building upon existing capabilities through continuous improvement of relevant intelligence sources and methods, recommending new tools and procedures to detect threats and protect intellectual property and assets.</li><li>Assisting in support of formal investigations and/or inquiries to resolve insider threat related matters, acceptable use policy violations.</li><li>Identifying areas for improvement in internal processes along with possible solutions.</li><li>Working with the IT Security Operations Lead to define and document standard operating procedures for security incident handling, malware analysis, vulnerability management etc.</li><li>Maintaining the confidentiality related to the professional secret and the security of the documents manipulated and administrating by him / her.</li></ul>What we’re looking for<ul><li>Bachelor’s degree in Security Management; Compliance or Computer Science or comparable course of studies</li><li>2+ years of experience in IT Security, with a focus on Incident Response and SOC Any of the following: Comptia Security+, SANS Certification, OffSec Certification</li><li>Foreign languages: Fluent in English, written and verbal</li></ul>Key Job Skills and or competencies<ul><li>Deep understanding of security systems, firewalls, authentication systems, log management, content filtering, network security and networking technologies</li><li>Has worked with and managed at least one of the following technologies: SIEM, SOAR, Data Lake, EDR, DLP, FW, IDS/IPS</li><li>Proven knowledge in the following security disciplines : advanced threats, information security incident detection and response, forensic investigative practices</li><li>Experience in developing, collecting and analysing threat intelligence</li><li>Experience with rule-driven and analysis-driven incident response platforms</li><li>Experience in AI and LLM models</li><li>Experience in cyber intelligence analytic methodologies such as Kill Chain, threat modelling, threat hunting</li><li>Relevant experience in an international environment with globally distributed teams</li><li>Identifying problems; recognizing significant threats and risks; making connections between data</li><li>Tracing possible causes of problems; investigating relevant data</li><li>Upholding generally accepted social and ethical standards in job-related activities</li><li>Strong written, oral and presentation skills</li></ul>Internal Use Only: SalaryGlobal Terms of Use and Privacy Statement Carefully read the BorgWarner Privacy Policy before using this website. Your &nbsp;ability to access and use this website and apply for a job at BorgWarner are conditioned on your acceptance and compliance with these terms.Please access the linked document by clicking <a href="https://www.borgwarner.com/legal/privacy-policy-for-online-applications">here</a><a href="http://multimedia.3m.com/mws/media/1274940O/3m-jobs-country-data-privacy-statements-external.pdf">,</a> select the geographical area where you are applying for employment, and review. Before submitting your application you will be asked to confirm your agreement with the terms.Career Scam Disclaimer:&nbsp; BorgWarner makes no representations or guarantees regarding employment opportunities listed on any third-party website.&nbsp; To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by BorgWarner. &nbsp;Applicants should never provide their national ID numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. &nbsp;Job applicants are invited to contact BorgWarner through BorgWarner’s website to verify the authenticity of any employment opportunities.

IT Security Detection Engineer

About the Job

About the Company

BorgWarner

Similar Jobs

R&D Cybersecurity Analyst (Product Security Engineer)

R&D Cybersecurity Analyst (Product Security Engineer)

Senior Engineer Cyber Security IT-OT

Senior Engineer Cyber Security IT-OT

Cybersecurity Engineer

Cybersecurity Engineer

Manager - Cyber Security

Manager - Cyber Security

IT Cyber Security Specialist

IT Cyber Security Specialist

Senior Global IT Security Specialist

Senior Global IT Security Specialist

Global IT Security Specialist

Global IT Security Specialist

Security Incident Manager

Security Incident Manager

Cyber Security Operation Engineer

Cyber Security Operation Engineer

Cyber Security Engineer

Cyber Security Engineer