Cybersecurity Specialist III

Cybersecurity Specialist III

Company Overview

LG Energy Solution Vertech, Inc. (LGES Vertech) is a full-service energy storage system supplier and integrator. Using our core strengths of expert service to our customers, unparalleled safety, and excellence in manufacturing, we bring standardized, fully integrated energy storage systems to a rapidly growing worldwide market. Our systems address our customers' needs to reduce capital equipment and installation costs while enhancing system level performance and reliability using automated monitoring systems and analytics across the battery, power conditioning and auxiliary systems. Our AEROS® energy operating system is the engine of innovation to provide advanced control functions allowing our customers to maximize the value of their energy storage assets. Our service capabilities include advanced monitoring and analytics, scheduled maintenance, augmentation, and auxiliary system upgrades. The combination of excellence in battery technology and production coupled with nearly two decades of energy storage integration makes LGES Vertech a leading supplier and integrator in the power and energy markets.

LGES Vertech is a highly matrixed, team oriented organization that fosters cross functional collaboration and innovation. The company seeks high caliber candidates with proven experience and with characteristics that embody our corporate commitment to the virtues of humble, hungry and smart in all we do. Our diverse and growing team enjoys competitive salaries, generous benefits, including 100% employer sponsored medical, dental, vision, life and disability insurance.

For more information about LGESVT, please visit www.lgensol-vt.com. 

Position Overview

The Cybersecurity Specialist III is a senior individual contributor on the enterprise cybersecurity team at LG Energy Solution Vertech (LGESVT), reporting to the Lead Cybersecurity Engineer. The role carries day-to-day responsibility for security operations across LGESVT’s enterprise estate — incident triage and response, SIEM query development and tuning, vulnerability remediation, endpoint detection, cloud security in AWS, and identity and access management.

The role spans the full breadth of enterprise security operations rather than a single specialized area, and carries meaningful autonomy within each domain. The Specialist III operates independently on day-to-day security operations and works closely with the Lead Cybersecurity Engineer on complex engineering and incident response work.

Key Responsibilities

Incident Response & Investigation

• Act as a first responder for security alerts across the enterprise estate, performing triage to establish severity, scope, and the required response path.
• Investigate confirmed incidents completely to root cause using host, network, identity, and cloud log analysis.
• Produce clear and complete incident documentation — timeline, indicators, actions taken, and findings — suitable for internal review, audit evidence, and customer notification where contractually required.
• Execute containment and eradication steps under the direction of the Lead Cybersecurity Engineer and contribute to post-incident review and lessons learned.
• Participate in the security on-call rotation.

SIEM Operations & Detection

• Write, tune, and maintain SIEM queries and correlation rules across enterprise log sources.
• Work directly with raw log data to validate parsing, identify coverage gaps, and confirm that detections fire as intended.
• Tune alerts to reduce false positives while preserving detection coverage, documenting the rationale for each tuning decision.
• Support the onboarding of new log sources, including field mapping, normalization, and validation.
• Contribute detection content to the team’s MITRE ATT&CK-mapped detection library.

Vulnerability Management

• Operate the recurring vulnerability scanning cycle across servers, endpoints, and cloud workloads.
• Prioritize findings using severity, exploitability, asset criticality, and actual exposure — not CVSS score alone.
• Coordinate remediation with IT, Engineering, and system owners; track issues to closure and escalate where timelines slip.
• Maintain exception records with documented compensating controls and defined review dates.
• Report on vulnerability posture, remediation performance, and aging against defined service levels.

Endpoint Detection & Response

• Administer and tune the EDR platform, including policy configuration, exclusion management