Security Operations & Incident Response Specialist

Johnson Controls; Glendale (AZ); On-site; USD 76,000 - 105,000; Full time

Benefits offered by this job

Competitive salary

Paid vacation/holidays/sick time

Comprehensive benefits (401K, medical,

Job summary

Johnson Controls is seeking a Security Operations and Incident Response professional to join our team in the United States. You will investigate security alerts, drive root-cause analyses, and coordinate across security, IT, and business units to contain and remediate threats.

You will apply modern cybersecurity tools (EDR, SIEM, firewalls) and threat intel to detect evolving threats, document findings clearly, and continuously improve detection and response capabilities in a fast-paced

Qualifications

• 1–5 years in a SOC, incident response or related role.
• Experience with SIEM/EDR or cloud security tools.
• Familiar with MITRE ATT&CK and common malware indicators.
• Strong communication and documentation skills.
• Understanding of TCP/IP, DNS, HTTP, VPN and Windows/Linux basics.
• Able to work in a ticket-driven environment with SLAs.
• Inquisitive mindset.

Responsibilities

• Investigate and respond to security alerts and incidents.
• Lead and support incident response efforts across teams to contain and remediate threats.
• Improve detection and response through automation, runbooks and SOPs.
• Identify and strengthen threat detection and prevention capabilities.
• Integrate threat intelligence into workflows to address emerging threats.
• Collaborate with Security, IT, and Business teams to enhance readiness and resilience.

Skills

Security Operations

Incident Response

EDR

SIEM

Firewalls

Cloud security

Threat intelligence

Analytical skills

Communication skills

Networking basics

Windows/Linux basics

Ticketing / SLA

M365 Defender

Defender for Endpoint

Sentinel

Splunk

CrowdStrike

Palo Alto

Zscaler

Tools

M365 Defender

Defender for Endpoint

Sentinel

Splunk

CrowdStrike

Palo Alto

Zscaler

Job description

Johnson Controls is seeking a Security Operations and Incident Response professional to join our team in the United States. You will investigate security alerts, drive root-cause analyses, and coordinate across security, IT, and business units to contain and remediate threats.

You will apply modern cybersecurity tools (EDR, SIEM, firewalls) and threat intel to detect evolving threats, document findings clearly, and continuously improve detection and response capabilities in a fast-paced