Cyber Security Analyst

About ITT:

ITT is an industrial manufacturer of critical, engineered components that serve fast-growing end markets in transportation, flow, energy, aerospace and defense. The company’s differentiation is sustained through a combination of several factors: execution, the quality of its leadership and our DNA as an engineering leader. We have a clear purpose as an organization: to provide our customers with cutting-edge solutions to help solve their most critical needs.

 The company generated 2023 revenues of $3.3 billion and is comprised of three distinct segments: 

• Motion Technologies ($1.5B revenue) is a global leader in brake pads, shock absorbers and sealing solutions for the automotive and rail markets
• Industrial Process ($1.1B revenue) is a global leader in centrifugal and twin-screw pumps for the chemical, energy, mining and industrial markets
• Connect & Control Technologies ($0.7B) is a niche player in harsh environment connectors and control components in critical applications for the aerospace, defense and industrial markets.

 ITT is headquartered in Stamford, Connecticut with over 10,000 employees in more than 35 countries and sales in approximately 125 countries.

Position Summary

Under the direction of the CSOC Manager, this individual plays a crucial role in bridging the gap between cybersecurity, IT, and business operations. This person is expected to be both technically experienced and business-aligned as s/he works with both IT and business stakeholders to analyze and respond to security threats and events.

 

We are seeking an experienced Cybersecurity Operations Analyst to join our team. The successful candidate will be responsible for a multitude of service lines within cybersecurity, including responding to security events, cybersecurity tool tuning and management, vulnerability management and threat hunting.

 

This role will focus on threat monitoring, detection, and response as part of our Cyber Security Operations Center (CSOC). The analyst will play a key role in strengthening our security posture by helping implement and manage security controls aligned with CMMC2 Level 2, NIS2 regulations, and other compliance frameworks.

 

As part of the cybersecurity operations team, you will actively investigate incidents, monitor enterprise environments, and collaborate with internal and external stakeholders to protect critical assets in a highly regulated environment.

 

This individual will be highly driven (“high motor”), able to balance active priorities, be meticulous and planful. They will be comfortable addressing ambiguity, able to consistently deliver results, be naturally curious and highly accountable, and approach situations in a thoughtful and process-oriented manner. This person will work closely with individuals at all levels of the information technology organization and business partners (executives, peers, staff members, individual contributors, cross-functional team members) to identify risk and compliance gaps, provide guidance on remediation, and provide consultation on adherence to ITT security policy for all aspects of the global organization.

Essential Responsibilities

This position will be focused on security for ITT as a whole, as well as increasing capabilities and posture of ITT’s security.

 

• Perform continuous monitoring of security systems and data to detect, analyze, and respond to security incidents in real-time.
• Triage and escalate security events and assist with incident handling procedures.
• Provide detailed analysis of malicious activity, assessing the severity and potential impact on systems.
• Use Security Information and Event Management (SIEM) tools and threat intelligence platforms to identify and track potential threats.
• Assist in identifying, assessing, and mitigating vulnerabilities across IT assets, in coordination with vulnerability management teams.
• Recommend and implement security patches and updates as needed.
• Creation of alerts and tuning of current alerts and security solutions.
• Train others on primary areas and responsibilities
• Use Security Information and Event Management (SIEM) tools and threat intelligence platforms to identify and track potential threats.
• Stay up to date on security news bulletins and current threats.
• Analyze network traffic and intrusion alerts; discern false positives.
• File/link analysis and immunization against those types of attacks.
• Support cyber security governance in the formulation of cyber-related policies, standards, and procedures.
• Meet tight deadlines in a fast-paced environment.
• Document processes and activities for repeatable results.
• Rotating on-call will be