Security Specialist Plano,Texas,United States

Ericsson; Plano (TX); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Parental leave

Job summary

Ericsson is seeking a Security Specialist to join our global Cyber Defense Center in the United States, a hybrid role with four days in the office and specific CT work hours (10:30 AM – 6:30 PM CT, 11:30 AM – 7:30 PM CT during DST). The team monitors, triages, and investigates alerts 24/7 from a SOC, Threat Intelligence, Incident Response, and more.

You will work with AI systems to automate repetitive tasks and drive improvements in detection engineering and automation.

Qualifications

• 7+ years of experience in triage, incident response, and detection engineering within a SOC environment.
• Proficiency with EDR, ITDR, cloud security, SIEM, and exposure management tooling; CrowdStrike Falcon experience preferred
• Broad technical knowledge across cloud platforms (AWS, GCP, Azure), Linux, Windows, networking, and identity management, with deep expertise in at least one area
• Strong understanding of threat actor TTPs, with the ability to recognize indicators in telemetry and logs and determine investigative next steps
• A growth mindset, genuine passion for cybersecurity, and a drive to continuously learn and improve without complacency
• Composure and resilience under pressure, with the ability to stay focused during high-stress situations and collaborate effectively with the team
• Strong professional integrity and commitment to handling confidential information with discretion
• Preferred certifications: SANS/GIAC — GCFA, GCFE, GCIA, GCIH, and/or GCFR

Responsibilities

• Triage and respond to prioritized alerts in a follow-the-sun SOC model, validating true/false positives, assessing malicious activity, and responding per established plans; elevate advanced threat activity to the Incident Response team and support scoping, containment, and eviction.
• Collaborate with agentic AI systems (commercial and in-house) that automate repetitive tasks, enabling focus on analytical work.
• Contribute to SOC improvement and automation, including detection engineering, reinforcement learning, Falcon Fusion workflows, and Foundry app development.
• Continuously develop skills through Immersive Labs, on-the-job training, quality review sessions, conferences, and peer collaboration.

Skills

SOC experience

Threat detection

Cloud security

Cybersecurity fundamentals

Tools

CrowdStrike Falcon

SIEM tools

EDR tooling

Cloud platforms (AWS/GCP/Azure)

Job description

Grow with us

Ericsson Inc. does not sponsor U.S work authorizations for this job position including U.S. immigration filings for initial and/or change of employer paperwork for H-1’s, H-1B1’s, E-3’s, O-1’s, and TN’s. Ericsson also does not hire F-1’s working on CPT or EAD for this position.

About This Opportunity

Ericsson is seeking a Security Specialist to join our global Cyber Defense Center (CDC), based in the US. This is a hybrid role requiring 4 days per week in the office, with working hours of 10:30 AM – 6:30 PM CT (11:30 AM – 7:30 PM CT during Daylight Saving Time), and one weekend shift per month.

The CDC is dedicated to detecting and responding to cyber attacks from external threat actors, with a primary focus on advanced persistent threats (APTs). The Security Operations Center (SOC) provides 24/7 monitoring, triage, incident response, and detection engineering, collaborating closely with CDC units covering Threat Intelligence, Incident Response & Threat Hunting, AI, Red Team, IT, and Process & Governance.

What You Will Do

Triage and respond to prioritized alerts in a follow-the-sun SOC model, validating true/false positives, assessing malicious activity, and responding per established plans; elevate advanced threat activity to the Incident Response team and support scoping, containment, and eviction.

Collaborate with agentic AI systems (commercial and in-house) that automate repetitive tasks, enabling focus on analytical work.

Contribute to SOC improvement and automation, including detection engineering, reinforcement learning, Falcon Fusion workflows, and Foundry app development.

Continuously develop skills through Immersive Labs, on-the-job training, quality review sessions, conferences, and peer collaboration.

The Skills You Bring

• 7+ years of experience in triage, incident response, and detection engineering within a SOC environment
• Proficiency with EDR, ITDR, cloud security, SIEM, and exposure management tooling; CrowdStrike Falcon experience preferred
• Broad technical knowledge across cloud platforms (AWS, GCP, Azure), Linux, Windows, networking, and identity management, with deep expertise in at least one area
• Strong understanding of threat actor TTPs, with the ability to recognize indicators in telemetry and logs and determine investigative next steps
• A growth mindset, genuine passion for cybersecurity, and a drive to continuously learn and improve without complacency
• Composure and resilience under pressure, with the ability to stay focused during high-stress situations and collaborate effectively with the team
• Strong professional integrity and commitment to handling confidential information with discretion
• Preferred certifications: SANS/GIAC — GCFA, GCFE, GCIA, GCIH, and/or GCFR

Why join Ericsson?

At Ericsson, you´ll have an outstanding opportunity. The chance to use your skills and imagination to push the boundaries of what´s possible. To build solutions never seen before to some of the world’s toughest problems. You´ll be challenged, but you won’t be alone. You´ll be joining a team of diverse innovators, all driven to go beyond the status quo to craft what comes next.

Compensation and Benefits at Ericsson

Your Pay

The salary range for this position is dependent on various factors including, but not limited to, location, and the candidate’s combination of job-related knowledge, qualifications, skills, education, training, and experience.

Short-Term Variable Compensation Plan : Your pay also includes the opportunity for an annual bonus. Actual bonus payouts are based on performance of the business against the unit’s objectives, individual performance, and the individual bonus target. Certain eligibility and pro-ration rules apply.

Sales Incentive Plan : Your pay also includes the opportunity for sales incentives as a part of Ericsson’s Sales Incentive Plan. Actual payouts are based on performance of the business against the unit’s objectives, individual performance, and the individual incentive target. Certain eligibility and pro-ration rules apply.

Your Health

• Ericsson offers excellent health benefits including the choice of three medical plan options and a dental plan option that allow an employee to select the level of coverage that suits their needs
• Employees will receive company credits in an amount equal to the cost that Ericsson pays toward the cost of their medical and dental premiums for themselves and eligible covered dependents

Your Financial Security

• The Ericsson US 401(k) Plan offers an automatic 3% company contribution and Ericsson match $1 for every $1 you put into the 401(k) Plan on the first 3% of your eligible pay, plus 50 cents on every $1 on the next 2% of eligible pay. When you contribute at least 5% of eligible pay, you are receiving Ericsson’s full matching contributions of 4%. Matching and company automatic contributions stop when your total eligible pay for the year reaches the IRS limits
• Employees will also receive company credits in an amount equal to the cost of basic life insurance and basic accidental death and dismemberment coverage, as well as short-term and long-term disability coverage
• Employees also have the option to participate in Ericsson’s Stock Purchase Plan

Your Time

Your work-life balance is important to us. New employees are provided a minimum of 15 days of accrued vacation, up to 3 personal days per year, 11 annual holidays, 8 hours of volunteer time, and 80 hours of sick time annually. Please note paid time off is pro-rated based on the employee’s start date. Furthermore, Ericsson provides up to 16 weeks of paid maternity leave and 6 weeks of parental or adoption leave at 100% of pay.

Additional Benefits

Ericsson offers many other company-paid benefits such as financial wellness programs, educational assistance, matching gifts, and recognition programs.

Primary country and city: United States (US) || Plano (Country/ City)

Job details: Security Specialist

Ericsson uses a merit-based hiring approach that values people with different experiences, perspectives and skillsets. We truly believe this approach drives innovation, which is essential for our future growth. We encourage people from all backgrounds to apply and realize their full potential as part of our Ericsson team. Ericsson is proud to be an Equal Opportunity employer, learn more.

If you need assistance or to request an accommodation due to a disability, please contact Ericsson at [e-mail].

DISCLAIMER: The above statements are intended to describe the general nature and level of work being performed by employees in this position. They are not an exhaustive list of all responsibilities, duties and skills required for this position, and you may be required to perform additional job tasks as assigned.