Note: The job is a remote job and is open to candidates in USA. ITT Inc. is hiring a Cybersecurity Engineer for its Cybersecurity Operations Center. The role strengthens the organization’s security posture by managing and improving security tools, conducting identity, cloud, container, and acquisition-related security reviews, and supporting threat detection, risk remediation, and security governance.
Responsibilities
- Identify ways to improve existing investments, augment with future investments, or identify gaps in our program
- Maintain and deploy security controls and tool architecture
- Expand log sources and MDR integrations as needed
- Design and architect new solutions and services
- Increase automation and identify ways to augment existing tasks with AI
- Perform Active Directory and Azure AD configuration audits, utilizing tools such as Ping Castle and Azure AD / Entra Health Reports
- Identify configuration weaknesses related to authentication methods, privileged access, legacy protocols, and identity governance controls
- Support in PAM and RBAC designs/discussions
- Conduct cloud configuration audits across Azure and other cloud platforms, including:
- Identity and access configurations
- Network security groups and routing
- Logging, monitoring, and security control enablement
- Perform Azure container and container platform configuration audits, focusing on:
- Role based access controls
- Network exposure
- Secure defaults and hardening requirements
- Develop and maintain security standard operating procedures, including:
- SOPs and Guides on specific tools
- Project plans
- Business continuity plans
- Support continuous improvement of configuration policies and technical standards
- Conduct configuration and security posture reviews during mergers and acquisitions, including:
- Network and firewall configurations
- Identity platforms
- Cloud environments
- Vulnerability and overall risk landscape
- Identify inherited configuration risks and provide actionable remediation guidance
- Produce clear, risk focused audit findings and remediation recommendations for technical and non technical stakeholders
- Collaborate with infrastructure, network, cloud, and identity teams to validate findings and drive corrective actions
- Support broader cybersecurity risk and governance initiatives as needed
Skills
- Bachelor's degree in computer science, Information Technology, Cybersecurity, Networking, or a related field
- Minimum of 5 years of experience in cybersecurity, or another discipline with transferable skills
- The ideal candidate will have a broad set of experiences (IT operation, systems administration, cybersecurity, networking administration, and/or directory services administration) ranging subject matter areas such as incident handling, risk identification and management, and assessments, and IT function administration
- Familiar with common and uncommon security tools and suites
- Familiar with Google SecOps or equivalent SEIMs
- Experienced with MDR and SEIM Management
- Experience auditing Active Directory, Azure AD / Entra ID, and cloud environments
- Familiarity with CIS Benchmarks, configuration hardening standards, and security baselines
- Understanding of configuration‑driven risk versus vulnerability‑scan‑only findings
- Ability to document complex technical findings in clear, defensible language
- Strong MITRE ATT&CK framework knowledge
- Strong investigation skills
- Understand risk sources, potential impacts, and likelihood
- Ability to advise on risk response and mitigations to risk
- Possess the ability to identify insecure ports/protocols
- Strong knowledge of vulnerability management processes and patch management lifecycle
- Analytical mindset and problem-solving skills to prioritize and manage risks effectively
- Collaborative team player with the ability to build strong relationships across departments
- Demonstrated ability to write clear and concise technical documentation and policies
- Ability to multi-task and change priorities with short notice
- High standard of professionalism and ethics
- Professional certifications such as C|EH, CISCP, or SANS certs
- Experience with M&A technical due diligence a plus
Benefits
- Health insurance
- 401(k)
- Short and long-term disability
- Paid time off
- Growth and developmental opportunities
- Other incentive compensation programs
- Remote position
Company Overview
Company H1B Sponsorship