IT Security Engineer

PHINIA Delphi Brasil Ltda. - (Brazil); Auburn Hills (MI); Híbrido; USD 90.000 - 130.000; Jornada completa

Descripción de la vacante

PHINIA is seeking an IT Security Engineer to design, implement, monitor, and improve security controls across infrastructure, networks, endpoints, and cloud environments. The role ensures secure operation of PHINIA's IT systems; you will conduct security testing, respond to incidents, remediate vulnerabilities, and support enterprise security initiatives.

The engineer will collaborate with infrastructure, networking, applications, and managed security partners to protect PHINIA from threats and

Formación

• Bachelor's degree in IT, cybersecurity, or related field.
• 3+ years of IT security experience.
• Solid cybersecurity fundamentals: network security, endpoint protection, auth, encryption.
• Hands-on security operations experience with EDR/XDR, email security, DLP, vulnerability management, and SIEM/SOC.
• Familiarity with Zero Trust, identity governance, MFA, Conditional Access, OAuth/SAML.
• Experience with Windows/Linux, cloud (Azure preferred), and ITIL-driven incident/change processes.
• Security+ (CompTIA) preferred; CISSP/CISSP Associate or CCSP preferred for cloud/hybrid environments.

Responsabilidades

• Monitor and maintain PHINIA's security controls across end-user devices, email, vulnerabilities, identities, and SIEM/SOC platforms.
• Conduct regular security assessments, baselines, and hardening checks; coordinate remediation with teams.
• Support security incident response: triage, investigation, containment, eradication, root-cause analysis.
• Review and enhance security controls and configurations to strengthen Zero Trust posture and cloud readiness.
• Perform log analysis and alert validation across SIEM/XDR/Defender; coordinate with SOC/MSSP for escalation and closure.
• Assist in vulnerability scanning and patch validation across infra, apps, and cloud workloads.
• Support secure access protocols: MFA, Conditional Access, RBAC, PIM/JIT.
• Maintain security documentation, architecture diagrams, SOPs, runbooks, and incident playbooks.
• Collaborate with infrastructure, network, cloud, and application teams to ensure secure-by-default designs.
• Participate in DR/BCP testing, breach simulations, and tabletop exercises; assist with response readiness.
• Support onboarding of new security tools and SOAR workflows; improve detection logic.
• Work with SOC, EDR, DLP, and MSSP partners to ensure ongoing security operations across sites.
• Identify recurring issues; propose optimizations and security awareness initiatives.
• Contribute to security automation using PowerShell, Python, KQL, and SOAR playbooks.

Conocimientos

EDR/XDR

CrowdStrike

Proofpoint

DLP

Qualys/Rapid7/Tenable

SIEM/SOC

Zero Trust

Azure

OAuth/SAML

Identity governance

Educación

Bachelor's degree in IT or related field

Herramientas

Qualys

Rapid7

Tenable

CrowdStrike

Proofpoint

Descripción del empleo

ABOUT US

PHINIA: Advancing sustainability today, powering a cleaner tomorrow.

PHINIA is a diversified industrial supplier and global leader in the development of fuel systems, electrical systems, and aftermarket solutions, with a strong portfolio of trusted brands that includes DELPHI®, DELCO REMY®, and HARTRIDGE™. With over 100 years of manufacturing expertise and industry relationships, PHINIA has approximately 12,500 talented employees and over 40 locations in 20 countries and is headquartered in Auburn Hills, Michigan, USA.

Read More

JOB PURPOSE

PHINIA is seeking an IT Security Engineer to support the design, implementation, monitoring, and improvement of PHINIA's security controls across infrastructure, networks, endpoints, and cloud environments. This role ensures the secure operation of PHINIA's IT systems by conducting security testing, responding to incidents, executing vulnerability remediation, and supporting enterprise security initiatives. The engineer will work closely with infrastructure, networking, applications, and managed security partners to protect PHINIA from cyber threats and support ongoing security enhancements. This is a hybrid position and candidates will be expected to be in office at least 3 days per week.

KEY RESPONSIBILITIES

• Monitor and maintain PHINIA's enterprise security controls across endpoint protection (EDR/XDR), email security, vulnerability management, identity security, and SIEM/SOC platforms, ensuring continuous threat visibility and protection.
• Conduct regular security assessments, configuration baselines, system hardening checks, and coordinate remediation activities with infrastructure, cloud, and application teams.
• Support security incident response, including alert triage, investigation, containment, eradication, and detailed root ‑ cause analysis with follow‑up improvements.
• Review and enhance existing security controls, policies, and configurations to strengthen PHINIA's Zero Trust posture, cloud readiness, and resilience against advanced threats.
• Perform log analysis and alert validation across SIEM/XDR/Defender platforms; verify findings from managed security service providers (SOC/MSSP) and ensure proper escalation and closure.
• Assist in vulnerability scanning, patch validation, configuration drift checks, and lifecycle follow‑up activities across infrastructure, applications, and cloud workloads.
• Support enforcement of secure access protocols such as MFA, Conditional Access, role ‑ based access control, privileged access governance (PIM/JIT) and secure configuration baselines.
• Maintain and update security documentation including standards, architecture diagrams, SOPs, runbooks, incident playbooks, and forensic guidelines.
• Collaborate with infrastructure, network, cloud, and application teams to ensure secure system design, secure‑by‑default configurations, and alignment to PHINIA cybersecurity standards.
• Participate in DR/BCP testing, breach simulations, tabletop exercises, and resilience drills, contributing to scenario planning and response readiness.
• Support evaluation, onboarding, and operationalization of new security tools, automation capabilities, SOAR workflows, and detection technologies.
• Work closely with SOC, EDR, DLP, email security, and managed detection partners to ensure strong, continuous, and effective security operations across global sites.
• Identify recurring security issues, propose optimization opportunities, improve detection logic, and support the rollout of security awareness and hygiene initiatives across PHINIA.
• Contribute to security automation initiatives (PowerShell, Python, KQL, SOAR playbooks) to reduce manual effort, improve response time, and enhance detection accuracy.

What we're looking for

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
• 3+ years of experience in IT security, cybersecurity operations, or IT risk management.
• Solid understanding of cybersecurity fundamentals: network security, endpoint protection, authentication, encryption, security protocols, and hardening standards
• Hands ‑ on experience across security operations, including Endpoint Detection & Response (CrowdStrike or similar), email security (Proofpoint), Data Loss Prevention (DLP), vulnerability management platforms (Qualys, Rapid7, Tenable), and SIEM/SOC alert investigation
• Familiarity with Zero Trust concepts, identity governance, MFA, Conditional Access, and modern authentication protocols (OAuth/SAML).
• Good working knowledge of infrastructure, Windows/Linux OS, network basics, and cloud environments (Azure preferred).
• Experience working within ITIL-driven environments and following structured Incident/Problem/Change processes
• Security+ (CompTIA) - preferred
• CYSA+ or PenTest+ - nice to have
• AZ - 500: Microsoft Azure Security Engineer - plus
• CCSP or CISSP Associate - preferred for modern cloud/hybrid environments

EQUAL EMPLOYMENT OPPORTUNITY

PHINIA is an equal employment oppo