Cyber Security Incident Response Team Analyst

Stellantis; Auburn (AL); On-site; USD 85,000 - 120,000; Full time

Benefits offered by this job

Health coverage and benefits

Paid time off

401(k) match

Company vehicle lease program

Tuition reimbursement and student loan

Volunteer hours

Job summary

Stellantis in Auburn, Alabama, is seeking a CSIRT Analyst to monitor, investigate, and respond to cybersecurity threats across the enterprise. You will routinely use SIEM Sentinel, perform threat hunting, and coordinate with global security and infrastructure teams.

The role emphasizes incident investigation, log analysis, and contributing to the optimization of security tools. A strong background in networking, operating systems, and MITRE ATT&CK is preferred.

Qualifications

• BS/BA degree in Computer Science, Data Science, Engineering, Information Science, Statistics, Information Systems, or other relevant disciplines from an accredited university or recognized higher education institution.
• Equivalent international qualifications such as a BSc, MSc, or Diplôme d'ingénieur (Europe) are also acceptable.
• Minimum 3 years of overall experience as a Security Analyst in enterprise environments.
• Minimum 2 years of hands-on experience with SIEM Sentinel, including configuration, tuning, and incident investigation.

Responsibilities

• Define Sentinel use cases, dashboards, filters etc. as needed.
• Effectively communicate issues with Global teams as needed.
• Share results and ideas with the extended team.
• Provide hours of support as required.
• Have a solid understanding of enterprise environments including networking, web services, database, operating systems, etc.
• Experience with MITRE Attack is a plus.
• Provide documentation as needed, such as playbooks, to be shared with other team members.
• Ability to work from high level direction and then collaborate with the CSIRT and other Products within CDOC team.

Skills

SIEM Sentinel

Threat hunting

EDR/XDR

Incident investigation

Log analysis

MITRE ATT&CK

Communication with Global teams

Education

BS/BA in Computer Science, Data Science, Engineering, Information Science, Statistics, Information Systems

Tools

Resilient

Microsoft Sentinel

Job description

The Cyber Security Incident Response Team (CSIRT) Analyst is responsible for monitoring, detecting, analyzing, and responding to cybersecurity threats across the enterprise environment. The role focuses on proactive threat detection, incident investigation, SIEM monitoring, threat hunting, and coordination with global security and infrastructure teams to contain and remediate security incidents.

The analyst will leverage enterprise security technologies including SIEM, EDR/XDR, threat intelligence platforms, and security monitoring tools to identify malicious activity, investigate anomalies, and support continuous improvement of the organization’s security posture.

Role Description:

The ideal candidate will have experience in a variety of technologies essential to identifying threats to the Stellantis environment, specifically SIEM Microsoft Sentinel, and use those skills to perform the following:

• Daily use of SIEM Tool, to analyze data flows and identify potential threats and anomalies.
• Ability to provide a detailed analysis of logs from security infrastructure (Firewall, IPS, etc.).
• Provide internal threat hunting and policy abuse management based on information gathered in SIEM.
• Understand how to gather threat intelligence data.
• Recognize potential successful and unsuccessful intrusion attempts and compromises.
• Log incidents and track them via incident management tool (Resilient).
• Provide suggestions for Microsoft Sentinel optimization and source log parsing.

Responsibilities:

• Define Sentinel use cases, dashboards, filters etc. as needed.
• Effectively communicate issues with Global teams as needed.
• Share results and ideas with the extended team.
• Provide hours of support as required.
• Have a solid understanding of enterprise environments including networking, web services, database, operating systems, etc.
• Experience with MITRE Attack is a plus.
• Provide documentation as needed, such as playbooks, to be shared with other team members.
• Ability to work from high level direction and then collaborate with the rest of the CSIRT and other Products within CDOC team.

Basic Qualifications:

• BS/BA degree in Computer Science, Data Science, Engineering, Information Science, Statistics, Information Systems, or other relevant disciplines from an accredited university or recognized higher education institution.
• Equivalent international qualifications such as a BSc, MSc, or Diplôme d'ingénieur (Europe), or regionally accredited degrees (North America) are also acceptable.
• Minimum 3 years of overall experienceworking as a Security Analyst in enterprise environments.
• Minimum 2 years of hands-on experiencewith SIEM Sentinel, including configuration, tuning, and incident investigation.
• Strong understanding of SIEM (Security Information and Event Management)concepts, architecture, and operational workflows.
• Proven experience supporting and maintaining SIEM platformsin complex, large-scale enterprise infrastructures.
• Excellent analytical and problem-solving skills, with the ability to troubleshoot and resolve security-related issues effectively.
• Strong communication skills, with the ability to clearly articulate technical concepts to both technical and non-technical stakeholders, including management and cross-functional teams.

Our Benefits — Designed with You in Mind

Comprehensive Health & Well-being Coverage

From your very first day, you'll have access to medical, dental, vision, and prescription drug coverage — ensuring you and your family stay healthy and protected.

Generous Paid Time Off

We believe in work-life balance. That's why we offer: 17+ paid holidays, including shut-down from December 24th through New Years Day every year. Vacation, float & wellbeing days, sick time and fully paid parental leave when your family needs you most.

Competitive Retirement Savings Plans

We help you plan for the future with:

• An employer match on contributions to your 401k, Roth, and Catch-Up plans
• An employer contribution, even if you don't contribute

Income Protection & Insurance Options

Benefit from included and optional disability, life, and other insurance programs — because your peace of mind matters.

Company Vehicle Lease Program

Eligible employees and their immediate families can enjoy company vehicle lease options with included insurance, maintenance, and unlimited mileage. Plus, take advantage of exclusive discounts on Stellantis products.

Family Building Benefit

We proudly support all paths to parenthood- including fertility and infertility treatments, adoption services, and gestational surrogacy.

Support for Your Growth and Giving Back

We believe in investing in your future and your passions:

• Tuition reimbursement
• Student loan refinancing programs
• 18 paid volunteer hours each year to make a difference in your community

And so much more!

When you join us, you're not just building a career — you're joining a company that supports you, inside and outside of work.