Cyber Operations Engineer (IR) - Global Industrial

Genuine Parts Company•Atlanta, GA

10d

About The Position

Under general supervision, the Cyber Defense Engineer II works across cloud security, Identity and Access Management (IAM), infrastructure protection, cyber recovery, Disaster Recovery (DR) engineering, application security, DevSecOps, security tooling and automation, and data loss prevention. The role executes day-to-day Cyber Defense Engineering activities within its assigned domain. The position supports proactive threat hunting, threat intelligence operationalization, security operations monitoring, incident response, insider risk investigations, and cyber recovery activities. It also documents and maintains findings, Standard Operating Procedures (SOPs), and playbooks for threat hunting and detection processes. The role participates in an on-call rotation and supports operational technology recovery procedures and disaster recovery testing exercises. This position has no supervisory or budget responsibility. Motion offers healthcare coverage options, a 401(k), tuition reimbursement, vacation, sick, and holiday pay.

Requirements

Typically requires a bachelor’s degree in computer science, software engineering, or a related field, and three to five years of related experience, or equivalent experience.
Experience with relevant platforms and testing methodologies.
Experience operating SIEM platforms and analyzing log data.
Experience with EDR, content filtering, and/or other security toolsets.
Experience with cyber asset monitoring and technical asset management tools.
Strong analytical and investigative skills.
Comfortable operating in a shared-coverage, lean team environment.

Nice To Haves

Relevant certifications.

Responsibilities

Support proactive threat hunting by forming hypotheses and investigating anomalies across the environment.
Consume and operationalize threat intelligence feeds, translating findings into hunting priorities and detection improvements.
Participate in security operations center monitoring, incident response, and insider risk investigations as part of shared team coverage.
Support cyber recovery execution and managed service oversight as needed to ensure team-wide coverage.
Document and maintain findings, Standard Operating Procedures (SOPs), and playbooks for threat hunting and detection processes.
Participate in the security on-call rotation as needed.
Support cyber recovery activities, including operational technology recovery procedures and disaster recovery testing exercises.
Perform other duties as assigned.