Remote Cybersecurity Engineer - Threat Hunting & SIEM

ITT Inc. - English US; Connecticut; Hybrid; USD 100,000 - 149,000; Full time

Job summary

ITT Inc. is seeking a Cybersecurity Engineer for its Cybersecurity Operations Center (CSOC) to deploy, configure, and enhance security tools, hunt threats, and support incident response. The role emphasizes monitoring events, risk assessments, and enforcing security controls across IT and business teams.

Ideal candidates are in the Eastern or Central US time zones, working remotely. The position requires 5+ years in cybersecurity, strong tool knowledge, and the ability to communicate risk to

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity, networking, or related field.
• Professional certifications such as C|EH, CISSP, or SANS certs preferred.
• Minimum 5 years in cybersecurity with diverse IT/ops experience.
• Strong MITRE ATT&CK knowledge; ability to document findings clearly.

Responsibilities

• Security Tool Management & Expansion: improve investments, deploy architecture, expand log sources.
• Identity & Directory Services: audit AD/Azure AD configurations and governance.
• Cloud & Container Security: conduct Azure/cloud audits and enforcement of controls.
• Documentation Maintenance: write SOPs, project plans, and continuity plans.
• Mergers, Acquisitions & Third-Party Reviews: assess security posture in deals.
• Reporting & Collaboration: communicate risk findings to stakeholders.

Skills

Security tools

MDR/SEIM management

AD auditing

Cloud security

MITRE ATT&CK

Risk management

Incident handling

Documentation

Education

Bachelor's degree in computer science/IT/cybersecurity

Tools

Ping Castle

Azure AD/Entra

Google SecOps

MDR platforms

Job description

ITT Inc. is seeking a Cybersecurity Engineer for its Cybersecurity Operations Center (CSOC) to deploy, configure, and enhance security tools, hunt threats, and support incident response. The role emphasizes monitoring events, risk assessments, and enforcing security controls across IT and business teams.

Ideal candidates are in the Eastern or Central US time zones, working remotely. The position requires 5+ years in cybersecurity, strong tool knowledge, and the ability to communicate risk to