Cyber Defense Engineer (IR) & Threat Hunting

Genuine Parts Company; Birmingham (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Genuine Parts Company is seeking a Cyber Defense Engineer II to work across cloud security, IAM, infrastructure protection, cyber recovery, DR engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. This role conducts day-to-day Cyber Defense Engineering activities within their domain.

The role collaborates on threat hunting, incident response, disaster recovery testing, and SOP/documentation development while operating in a lean team environment.

Qualifications

• Bachelor’s degree in computer science, software engineering, or a related field and 3–5 years of related experience.
• Certifications relevant to security (e.g., CISSP, CISM) preferred.
• Experience with SIEM platforms and log data analysis.
• Experience with EDR, content filtering, and cyber asset monitoring tools.

Responsibilities

• Supports proactive threat hunting activities, forming hypotheses and investigating anomalies across the environment.
• Operates threat intelligence feeds to drive hunting priorities and detection improvements.
• Participates in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage.
• Supports cyber recovery execution and managed service oversight as needed to ensure team-wide coverage.
• Documents and maintains SOPs and playbooks for threat hunting and detection processes.
• Participates in the security on-call rotation as needed.
• Supports cyber recovery activities and disaster recovery testing exercises.

Skills

Threat hunting

SIEM experience

EDR knowledge

Log analysis

Analytical skills

Incident response

Lean team collaboration

Education

Bachelor's degree in computer science, software engineering, or related field

Tools

SIEM platforms

EDR tools

Content filtering systems

Cyber asset management tools

Job description

Genuine Parts Company is seeking a Cyber Defense Engineer II to work across cloud security, IAM, infrastructure protection, cyber recovery, DR engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. This role conducts day-to-day Cyber Defense Engineering activities within their domain.

The role collaborates on threat hunting, incident response, disaster recovery testing, and SOP/documentation development while operating in a lean team environment.