Cyber Operations Engineer (IR) - Global Industrial

Genuine Parts Company•Atlanta, GA

10d

About The Position

Under general supervision, the Cyber Defense Engineer II performs day-to-day Cyber Defense Engineering activities within an assigned domain. The work spans cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. The role supports threat hunting, security operations, incident response, insider risk investigations, and cyber recovery activities, including operational technology recovery procedures and disaster recovery testing. The position participates in shared team coverage and an on-call rotation as needed. The job description states that duties may be added or modified by management.

Requirements

Typically requires a bachelor’s degree in computer science, software engineering, or a related field, and three to five years of related experience, or equivalent experience.
Experience with relevant platforms and testing methodologies.
Experience operating SIEM platforms and analyzing log data.
Experience with EDR, content filtering, and/or other security toolsets.
Experience with cyber asset monitoring and technical asset management tools.
Strong analytical and investigative skills.
Comfort operating in a shared-coverage, lean team environment.

Nice To Haves

Relevant certifications.

Responsibilities

Support proactive threat hunting by forming hypotheses and investigating anomalies across the environment.
Consume and operationalize threat intelligence feeds, translating findings into hunting priorities and detection improvements.
Participate in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage.
Support cyber recovery execution and managed service oversight as needed to ensure team-wide coverage.
Document and maintain findings, Standard Operating Procedures (SOPs), and playbooks for threat hunting and detection processes.
Participate in the security on-call rotation as needed.
Support cyber recovery activities, including operational technology recovery procedures and disaster recovery testing exercises.
Perform other duties as assigned.