[Samsung Electronics America] Cyber Security Engineer 채용

Samsung Electronics America; United States; On-site; USD 76,000 - 110,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

Life insurance and 401(k) matching

Onsite café and workout facilities

Paid maternity and paternity leave

PTO and holidays

Wellness incentives

Job summary

Samsung Austin Semiconductor is seeking a Cybersecurity Engineer to implement and maintain our security infrastructure, protecting the enterprise from threats and ensuring rapid detection and response.

You will work across monitoring, incident response, forensics, and governance, collaborating with SOC and IT teams, with a focus on threat detection, incident investigation, and secure operations across Windows, Linux, and cloud platforms.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science or related field.
• Security certification is a plus.
• 2-4 years of experience in Cyber Security.
• Experience in, or eager to learn, system-engineering disciplines such as networking, Linux, and Windows Server administration.

Responsibilities

• Threat Detection: identify malicious activity early, analyze security events, and improve detection capabilities.
• Incident Investigation and Analysis: determine what happened, how, and impact, containing and preventing recurrence.
• Monitoring and Alert Management: maintain visibility across endpoints, servers, AD, network devices, cloud, containers, and SaaS apps.
• Incident Response: prepare for, detect, contain, eradicate, recover from, and document cybersecurity incidents with cross-team collaboration.
• Documentation: create, maintain, and improve security documentation for operations, compliance, and governance.
• Scanning External Media Devices for Threats: define policies, allow only approved encrypted devices, enforce least-privilege access, maintain inventory.

Skills

Cybersecurity

Incident response

Threat detection

Monitoring

Education

Bachelor’s degree in Cybersecurity

Job description

About Samsung Austin Semiconductor

Samsung is a world leader in advanced semiconductor technology, founded on the belief that the pursuit of excellence creates a better world. At Samsung Austin Semiconductor, we are Innovating Today to Power the Devices of Tomorrow.

Come innovate with us!

Position Summary

As a Cybersecurity Engineer, you will be responsible for implementing, and maintaining the organization’s cybersecurity infrastructure, ensuring the highest levels of protection against cyber threats. Additionally, you will oversee systems that monitor, detect, and respond to security incidents.

Role and Responsibilities

Here’s What You’ll Be Responsible For:

A Cyber Security Engineer responsible for Threat Detection focuses on identifying malicious activity as early as possible, analyzing security events, and improving an organization’s ability to detect cyber threats before they cause damage. This role typically spans security monitoring, detection engineering, threat hunting, and incident response.

Incident Investigation and Analysis.

A Cyber Security Engineer responsible for Incident Investigation and Analysis focuses on determining what happened, how it happened, what systems were affected, and how to contain and prevent future incidents. This role requires a combination of technical analysis, digital forensics, malware analysis, and collaboration with incident response teams.

• Validate whether an alert represents a true security incident.
• Classify incidents (e.g., malware, phishing, insider threat, ransomware).
• Determine severity and scope.
• Identify affected users, systems, and data.
• Escalate high-priority incidents to the incident response team.

Monitoring and Alert Management.

A Cyber Security Engineer responsible for Monitoring and Alert Management ensures continuous visibility into an organization’s IT environment by collecting, monitoring, and analyzing security events. The goal is to detect potential threats quickly, reduce false positives, and ensure that genuine security incidents are investigated and resolved efficiently.

• Endpoints (Windows, Linux, macOS)
• Servers and virtual machines
• Active Directory and Identity Providers
• Network devices (Firewalls, Routers, Switches)
• Cloud environments (AWS, Azure, Google Cloud)
• Kubernetes clusters and containers
• SaaS applications (Microsoft 365, Salesforce, ServiceNow)
• Databases
• VPN gateways
• Email security systems

A Cyber Security Engineer responsible for Incident Response focuses on preparing for, detecting, containing, eradicating, recovering from, and documenting cybersecurity incidents. The role requires collaboration across Security Operations (SOC), IT Infrastructure, Cloud, Networking, Legal, and Business teams to minimize the impact of security incidents and improve the organization’s security posture.

• Monitor security alerts from SIEM, EDR, IDS/IPS, firewalls, cloud platforms, and email security gateways.
• Validate alerts to distinguish true positives from false positives.
• Determine the scope, severity, and business impact of incidents.
• Classify incidents (e.g., malware, ransomware, phishing, insider threats, data exfiltration, DDoS).
• Escalate critical incidents according to the incident response plan.

Documentation.

A Cyber Security Engineer responsible for Documentation creates, maintains, and improves security documentation that supports security operations, incident response, compliance, governance, and technical implementations. High-quality documentation ensures that security processes are repeatable, auditable, and easily understood by technical teams, auditors, and management.

Scanning external media devices for threats.

A Cyber Security Engineer responsible for Scanning External Media Devices for Threats ensures that removable media (such as USB flash drives, external hard drives, CDs/DVDs, SD cards, smartphones, and other portable storage devices) are scanned, validated, and secured before they are allowed to connect to enterprise systems. This helps prevent malware infections, ransomware, unauthorized data transfer, and other threats introduced through removable media.

• Define removable media security policies.
• Allow only approved encrypted storage devices.
• Enforce least-privilege access for removable media.
• Maintain an inventory of approved external devices.

Skills and Qualifications

Here’s what you’ll need:

Bachelor’s degree in Cybersecurity, Computer Science or related field.

Security certification is a plus.

2-4 years of experience in Cyber Security.

Experience in, or eager to learn, system-engineering disciplines such as networking, Linux, and Windows Server administration.

The current base salary range for this role is between $76,000 - $110,000. Individual base pay rates will depend on factors including duties, work location, education, skills, qualifications and experience. Total compensation for this position will include a competitive benefits package and may include participation in company incentive compensation programs, which are based on factors to include organizational and individual performance.

Total Rewards

At Samsung Austin Semiconductor, base pay is just one part of our total compensation package. The base compensation for this role will depend on education, experience, skills, and location.

We offer a comprehensive benefits package, including:

• Medical, dental, and vision insurance
• Life insurance and 401(k) matching with immediate vesting
• Onsite café(s) and workout facilities
• Paid maternity and paternity leave
• Paid time off (PTO) + 2 personal holidays and 10 regular holidays
• Wellness incentives and MORE

Eligible full-time employees (salaried or hourly) may also receive MBO bonuses based on company, division, and individual performance.

All positions at Samsung Austin Semiconductor are full-time on-site.

U.S. Export Control Compliance

This role may require access to information subject to U.S. export control laws. Applicants must be authorized to access such information or eligible for government authorization.

Trade Secrets Notice

By submitting an application, you agree not to disclose to Samsung—or encourage Samsung to use—any confidential or proprietary information (including trade secrets) belonging to a current or former employer or other entity.