Cyber Security Engineer

Samsung Semiconductor; Austin (TX); On-site; USD 76,000 - 110,000; Full time

Benefits offered by this job

Medical Insurance

Dental/Vision Insurance

401(k) Matching

Onsite Cafés & Gym

Parental Leave

PTO & Holidays

Wellness Program

Job summary

Samsung Austin Semiconductor is seeking a Cybersecurity Engineer to design, implement, and maintain security infrastructure and respond to incidents across on‑premises and cloud environments. You will monitor security events, investigate alerts, and coordinate remediation with cross‑functional teams.

The role emphasizes threat detection, incident response, and thorough documentation, with a focus on safeguarding endpoints, servers, AD, networks, and cloud resources.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• Security certification is a plus.
• 2–4 years of experience in Cyber Security.
• Experience in, or eag to learn, system‑engineering disciplines such as networking, Linux, and Windows Server administration.

Responsibilities

• Threat Detection: identify malicious activity early, analyze security events, improve threat detection capabilities.
• Incident Investigation and Analysis: determine what happened, how it happened, scope, and containment.
• Monitoring and Alert Management: maintain visibility, reduce false positives, analyze security events.
• Incident Response: prepare for, detect, contain, eradicate, recover from incidents; coordinate with SOC, IT, Cloud, Networking, Legal, and Business teams.
• Documentation: create and maintain security documentation supporting operations, incidents, compliance, and governance.
• Scanning external media devices for threats: scan and secure removable media before connection to enterprise systems.

Skills

Threat Detection

Incident Analysis

Monitoring & Alerting

Incident Response

Documentation

External Media Scanning

Education

Bachelor’s degree in Cybersecurity, Computer Science or related field

Job description

About Samsung Austin Semiconductor

Samsung is a world leader in advanced semiconductor technology, founded on the belief that the pursuit of excellence creates a better world. At Samsung Austin Semiconductor, we are Innovating Today to Power the Devices of Tomorrow.

About Samsung Austin Semiconductor

Samsung is a world leader in advanced semiconductor technology, founded on the belief that the pursuit of excellence creates a better world. At Samsung Austin Semiconductor, we are Innovating Today to Power the Devices of Tomorrow.

Come innovate with us!

Position Summary

As a Cybersecurity Engineer, you will be responsible for implementing, and maintaining the organization’s cybersecurity infrastructure, ensuring the highest levels of protection against cyber threats. Additionally, you will oversee systems that monitor, detect, and respond to security incidents.

Role And Responsibilities

Here’s What You’ll Be Responsible For:

Threat Detection

A Cyber Security Engineer responsible for Threat Detection focuses on identifying malicious activity as early as possible, analyzing security events, and improving an organization's ability to detect cyber threats before they cause damage. This role typical spans security monitoring, detection engineering, threat hunting, and incident response.

Incident Investigation and Analysis.

A Cyber Security Engineer responsible for Incident Investigation and Analysis focuses on determining what happened, how it happened, what systems were affected, and how to contain and prevent future incidents. This role requires a combination of technical analysis, digital forensics, malware analysis, and collaboration with incident response teams.

• Validate whether an alert represents a true security incident.
• Classify incidents (e.g., malware, phishing, insider threat, ransomware).
• Determine severity and scope.
• Identify affected users, systems, and data.
• Escalate high-priority incidents to the incident response team.

Monitoring and Alert Management.

A Cyber Security Engineer responsible for Monitoring and Alert Management ensures continuous visibility into an organization's IT environment by collecting, monitoring, and analyzing security events. The goal is to detect potential threats quickly, reduce false positives, and ensure that genuine security incidents are investigated and resolved efficiently.

• Endpoints (Windows, Linux, macOS)
• Servers and virtual machines
• Active Directory and Identity Providers
• Network devices (Firewalls, Routers, Switches)
• Cloud environments (AWS, Azure, Google Cloud)
• Kubernetes clusters and containers
• SaaS applications (Microsoft 365, Salesforce, ServiceNow)
• Databases
• VPN gateways
• Email security systems

Incident Response.

A Cyber Security Engineer responsible for Incident Response focuses on preparing for, detecting, containing, eradicating, recovering from, and documenting cybersecurity incidents. The role requires collaboration across Security Operations (SOC), IT Infrastructure, Cloud, Networking, Legal, and Business teams to minimize the impact of security incidents and improve the organization's security posture.

• Monitor security alerts from SIEM, EDR, IDS/IPS, firewalls, cloud platforms, and email security gateways.
• Validate alerts to distinguish true positives from false positives.
• Determine the scope, severity, and business impact of incidents.
• Classify incidents (e.g., malware, ransomware, phishing, insider threats, data exfiltration, DDoS).
• Escalate critical incidents according to the incident response plan.

Documentation.

A Cyber Security Engineer responsible for Documentation creates, maintains, and improves security documentation that supports security operations, incident response, compliance, governance, and technical implementations. High-quality documentation ensures that security processes are repeatable, auditable, and easily understood by technical teams, auditors, and management.

Scanning external media devices for threats.

A Cyber Security Engineer responsible for Scanning External Media Devices for Threats ensures that removable media (such as USB flash drives, external hard drives, CDs/DVDs, SD cards, smartphones, and other portable storage devices) are scanned, validated, and secured before they are allowed to connect to enterprise systems. This helps prevent malware infections, ransomware, unauthorized data transfer, and other threats introduced through removable media.

• Define removable media security policies.
• Restrict unauthorized USB devices.
• Allow only approved encrypted storage devices.
• Prevent unauthorized data transfers.
• Enforce least-privilege access for removable media.
• Maintain an inventory of approved external devices.

Skills And Qualifications

Here’s what you'll need:

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• Security certification is a plus.
• 2- 4 years of experience in Cyber Security.
• Experience in, or eager to learn, system‑engineering disciplines such as networking, Linux, and Windows Server administration.

The current base salary range for this role is between $76,000 - $110,000. Individual base pay rates will depend on factors including duties, work location, education, skills, qualifications and experience. Total compensation for this position will include a competitive benefits package and may include participation in company incentive compensation programs, which are based on factors to include organizational and individual performance.

Total Rewards

At Samsung Austin Semiconductor, base pay is just one part of our total compensation package. The base compensation for this role will depend on education, experience, skills, and location.

We offer a comprehensive benefits package, including:

• Medical, dental, and vision insurance
• Life insurance and 401(k) matching with immediate vesting
• Onsite café(s) and workout facilities
• Paid maternity and paternity leave
• Paid time off (PTO) + 2 personal holidays and 10 regular holidays
• Wellness incentives and MORE

Eligible full-time employees (salaried or hourly) may also receive MBO bonuses based on company, division, and individual performance.

All positions at Samsung Austin Semiconductor are full-time on-site.

U.S. Export Control

This role may require access to information subject to U.S. export control laws. Applicants must be authorized to access such information or eligible for government authorization.

Trade Secrets

By submitting an application, you agree not to disclose to Samsung or induce or encourage Samsung to use any confidential or proprietary information (including trade secrets) belonging to a current or former employer or other entity.

• Please visit Samsung membership to see Privacy Policy, which defaults according to your location. You can change Country/Language at the bottom of the page. If you are European Economic Resident, please click here.
• Samsung Electronics America, Inc. and its subsidiaries are committed to Equal Employment Opportunity for all individuals regardless of race, color, religion, gender, age, national origin, marital status, sexual orientation, gender identity, status as a protected veteran, genetic information, status as a qualified individual with a disability, or any other characteristic protected by law.