Cyber Security Engineer

ITT Industries Holdings, Inc; Stamford (CT); Hybrid; USD 110,000 - 150,000; Full time

Job summary

ITT Industries Holdings, Inc. is seeking a Cyber Security Engineer to join our remote team. The role involves deploying and enhancing security tools, threat hunting, and incident response across our security program.

You will work with IT, infrastructure, and business teams to ensure security controls are integrated into daily operations. The ideal candidate has 5+ years in cybersecurity, strong knowledge of MITRE ATT&CK, SIEM/MDR setups, and extensive experience with Active Directory and cloud

Qualifications

• Minimum 5 years of experience in cybersecurity or equivalent
• Bachelor's degree in CS/IT/Cybersecurity or related field
• Strong knowledge of security tooling and frameworks (MITRE ATT&CK)
• Experience with Active Directory, Azure AD/Entra, and cloud environments
• Ability to write clear, technical documentation and policies

Responsibilities

• Monitor and expand security controls and tool architecture
• Perform security tool management and automation improvements (AI augmentation)
• Conduct threat detection, incident response, and risk assessments
• Coordinate with IT, infrastructure and business teams to embed security into operations
• Produce risk-focused audit findings and remediation recommendations

Skills

MITRE ATT&CK

Vulnerability management

Active Directory/Azure AD

MDR & SIEM management

Cloud security

Documentation

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Azure AD/Entra

Google SecOps

Ping Castle

SIEM solutions

Job description

Cyber Security Engineer

US-CT-Remote

Job ID: 2026-18423

# of Openings: 1

Category: Information Technology

US-CT - Work from Home

Overview

The Cybersecurity Operations Center (CSOC) has an opening for a cybersecurity Engineer which has primary areas of responsibility in deploying, configuring, and enhancing existing security tools, threat hunting and looking for advanced persistent threats.

This role involves monitoring security events, identifying vulnerabilities, conducting risk assessments, and deploying security controls to prevent unauthorized access, data breaches, and malicious activity. Cybersecurity Engineers work closely with IT, infrastructure, and business teams to ensure security best practices are integrated into daily operations and that regulatory, compliance, and organizational security requirements are met.

The Cybersecurity Engineer also plays a key role in incident response, threat detection, and continuous improvement of the organization's security posture. Responsibilities include managing security tools such as endpoint protection platforms, Email Security, SASE/SSE, SIEM solutions, and identity and access management systems; analyzing emerging threats; developing security standards and procedures; and supporting security awareness initiatives. Successful candidates possess strong technical expertise in cybersecurity principles, excellent problem-solving skills, and the ability to effectively communicate security risks and recommendations to both technical and non-technical stakeholders.

REMOTE POSITION - IDEAL CANDIDATE IN EASTERN OR CENTRAL US TIME ZONES.

Responsibilities

Security Tool Management & Expansion

• Identify ways to improve existing investments, augment with future investments, or identify gaps in our program
• Maintain and deploy security controls and tool architecture
• Expand log sources and MDR integrations as needed.
• Design and architect new solutions and services
• Increase automation and identify ways to augment existing tasks with AI

Identity & Directory Services

• Perform Active Directory and Azure AD configuration audits, utilizing tools such as Ping Castle and Azure AD / Entra Health Reports
• Identify configuration weaknesses related to authentication methods, privileged access, legacy protocols, and identity governance controls.
• Support in PAM and RBAC designs/discussions

Cloud & Container Security

• Conduct cloud configuration audits across Azure and other cloud platforms, including:
  • Identity and access configurations
  • Network security groups and routing
  • Logging, monitoring, and security control enablement
• Perform Azure container and container platform configuration audits, focusing on:
  • Role based access controls
  • Network exposure
  • Secure defaults and hardening requirements
• Documentation Maintenance.

Documentation Maintenance.

• Develop and maintain security standard operating procedures, including:
  • SOPs and Guides on specific tools
  • Project plans
  • Business continuity plans
• Support continuous improvement of configuration policies and technical standards.

Mergers, Acquisitions & Third Party Reviews

• Conduct configuration and security posture reviews during mergers and acquisitions, including:
  • Network and firewall configurations
  • Identity platforms
  • Cloud environments
  • Vulnerability and overall risk landscape
• Identify inherited configuration risks and provide actionable remediation guidance.

Reporting & Collaboration

• Produce clear, risk focused audit findings and remediation recommendations for technical and non technical stakeholders.
• Collaborate with infrastructure, network, cloud, and identity teams to validate findings and drive corrective actions.
• Support broader cybersecurity risk and governance initiatives as needed.

Qualifications

Education

Bachelor's degree in computer science, Information Technology, Cybersecurity, Networking, or a related field; Professional certifications such as C|EH, CISCP, or SANS certs preferred.

Experience

Minimum of 5 years of experience in cybersecurity, or another discipline with transferable skills. The ideal candidate will have a broad set of experiences (IT operation, systems administration, cybersecurity, networking administration, and/or directory services administration) ranging subject matter areas such as incident handling, risk identification and management, and assessments, and IT function administration.

Skills/Knowledge

• Familiar with common and uncommon security tools and suites.
• Familiar with Google SecOps or equivalent SEIMs
• Experienced with MDR and SEIM Management
• Experience auditing Active Directory, Azure AD / Entra ID, and cloud environments
• Familiarity with CIS Benchmarks, configuration hardening standards, and security baselines
• Understanding of configurationdriven risk versus vulnerabilityscanonly findings
• Experience with M&A technical due diligence a plus
• Ability to document complex technical findings in clear, defensible language
• Strong MITRE ATT&CK framework knowledge
• Strong investigation skills
• Understand risk sources, potential impacts, and likelihood.
• Ability to advise on risk response and mitigations to risk.
• Possess the ability to identify insecure ports/protocols.
• Strong knowledge of vulnerability management processes and patch management lifecycle.
• Analytical mindset and problem-solving skills to prioritize and manage risks effectively.
• Collaborative team player with the ability to build strong relationships across departments.
• Demonstrated ability to write clear and concise technical documentation and policies.
• Ability to multi-task and change priorities with short notice.
• High standard of professionalism and ethics.

#LI-REMOTE

PI287781531