CSIRT Analyst: Threat Hunting & Incident Response

Stellantis; Auburn Hills (MI); On-site; USD 90,000 - 140,000; Full time

Job summary

Stellantis is seeking a Cyber Security Incident Response Team (CSIRT) Analyst to monitor, detect, and respond to cybersecurity threats across the enterprise. The role emphasizes proactive threat detection, incident investigation, SIEM monitoring, and collaboration with global security and infrastructure teams to contain and remediate security incidents.

The ideal candidate will work with Microsoft Sentinel, EDR/XDR, threat intelligence platforms, and security monitoring tools to analyze data,

Qualifications

• Bachelor's degree in a technical field or equivalent.
• Minimum 3 years of security analyst experience in enterprise environments.
• Minimum 2 years hands-on experience with SIEM Sentinel, including configuration, tuning, and incident investigation.
• Strong understanding of SIEM concepts, architecture, and workflows.
• Proven ability to communicate technical concepts to technical and non-technical stakeholders.

Responsibilities

• Define Sentinel use cases, dashboards, filters, and alerts.
• Analyze logs from security infrastructure (firewalls, IPS, etc.).
• Conduct internal threat hunting and policy abuse management using SIEM data.
• Gather threat intelligence and apply to monitoring.
• Identify intrusion attempts and potential compromises.
• Log incidents and track them in the incident management tool (Resilient).
• Provide documentation and playbooks for team use.

Skills

Threat hunting

Log analysis

Incident investigation

Analytical thinking

Communication

Education

BS/BA in Computer Science or related fields

Tools

Microsoft Sentinel

EDR/XDR

Threat intelligence platforms

Resilient (Incident Management)

Job description

Stellantis is seeking a Cyber Security Incident Response Team (CSIRT) Analyst to monitor, detect, and respond to cybersecurity threats across the enterprise. The role emphasizes proactive threat detection, incident investigation, SIEM monitoring, and collaboration with global security and infrastructure teams to contain and remediate security incidents.

The ideal candidate will work with Microsoft Sentinel, EDR/XDR, threat intelligence platforms, and security monitoring tools to analyze data,