Cybersecurity Incident Response Specialist

Davis-Standard; Chicago (IL); Sur place; USD 110 000 - 160 000; Plein temps

Résumé du poste

Davis-Standard is seeking a Cybersecurity Specialist to safeguard our global information systems, cloud platforms, and manufacturing tech environments. You will lead incident response, coordinate with SOC providers, and drive vulnerability management and security engineering initiatives.

The role partners with infrastructure teams, regional IT teams, and business stakeholders to reduce organizational risk and improve security posture across our global operations.

Qualifications

• 5+ years in cybersecurity, systems administration, security operations, or infrastructure security.
• Experience investigating security incidents and performing root cause analysis.
• Experience with Microsoft 365 security technologies and Entra ID.
• Knowledge of endpoint security, identity security, vulnerability management, networking, and cloud security.
• Understanding of incident response methodologies and cyber threat detection.
• Strong communication, analytical, and documentation skills.

Responsabilités

• Investigate and respond to cybersecurity incidents affecting endpoints, servers, cloud services, networks, and manufacturing environments.
• Serve as primary technical escalation for SOC alerts and internal monitoring.
• Perform threat analysis, forensic review, root cause analysis, and security event investigations.
• Coordinate containment, eradication, recovery, and post-incident reviews.
• Improve detection capabilities through tuning, rules, and process improvements.
• Maintain incident response procedures, runbooks, and investigation standards.

Connaissances

Cybersecurity experience

Incident response

Microsoft 365 security

Entra ID

Endpoint security

Communication & documentation

Formation

Security certifications (see list)

Outils

CrowdStrike

Microsoft Defender Security Stack

Zscaler

SIEM platforms

Description du poste

Davis-Standard is seeking a Cybersecurity Specialist to safeguard our global information systems, cloud platforms, and manufacturing tech environments. You will lead incident response, coordinate with SOC providers, and drive vulnerability management and security engineering initiatives.

The role partners with infrastructure teams, regional IT teams, and business stakeholders to reduce organizational risk and improve security posture across our global operations.