Cybersecurity Defense Analyst - Senior

Cummins•Columbus, IN

2d•Onsite

About The Position

Cummins is seeking a Senior Cybersecurity Defense Analyst for its Systems/Information Technology team within the Corporate organization in Columbus, Indiana. The role focuses on protecting the organization’s technology environment, managing cybersecurity risk, and strengthening security controls while balancing business objectives. The analyst advises business and technology stakeholders, works across teams to incorporate security into technology solutions, and helps develop less experienced team members. The position also supports proactive security validation and offensive security initiatives. This includes adversary emulation, purple-team exercises, security testing across cloud, hybrid, and on-premises environments, and use of Breach and Attack Simulation (BAS) and adversary-emulation platforms. The analyst collaborates with threat intelligence, threat hunting, and defensive security teams to assess attacker behaviors, identify detection gaps, validate response capabilities, and recommend remediation. The role contributes to automation, operational reporting, repeatable attack scenarios aligned with MITRE ATT&CK, and improvements to security validation processes and capabilities. The position requires a college, university, or equivalent degree in Cybersecurity, Computer Science, Information Technology, or a related subject, or relevant equivalent experience. Intermediate-level relevant work experience is required, with 3–5 years of experience stated. An OCSP or equivalent certification is required, or the willingness to obtain one. Licensing may be required for compliance with export controls or sanctions regulations.

Requirements

College, university, or equivalent degree in Cybersecurity, Computer Science, Information Technology, or a related subject, or relevant equivalent experience.
Intermediate-level relevant work experience; 3–5 years of experience is stated.
OCSP or equivalent certification, or willingness to obtain such a certification.
Experience in cybersecurity operations, cloud security, security engineering, offensive security, or related technical security disciplines.
Familiarity with cloud platforms such as AWS, Azure, or OCI and associated security concepts.
Understanding of common attacker tactics, techniques, and procedures and frameworks such as MITRE ATT&CK.
Exposure to scripting or automation using languages such as Python, PowerShell, or Bash.
Strong analytical, troubleshooting, and collaboration skills, including the ability to work across offensive and defensive security functions.
Ability to deliver training that engages learners and adapts to individual and group needs.
Ability to identify and assess cybersecurity risks against industry frameworks, regulations, and organizational policies and develop mitigation strategies aligned with business objectives.
Ability to evaluate the design and effectiveness of controls against industry frameworks and regulations.

Nice To Haves

Familiarity with security validation, BAS, detection engineering, purple teaming, penetration testing, or adversary-emulation concepts.

Responsibilities

Protect Cummins’ technology environment by applying cybersecurity policies, data privacy principles, and security best practices to reduce organizational risk.
Lead cybersecurity risk assessments, identify potential vulnerabilities, and ensure mitigation strategies are developed and implemented.
Advise business and technology stakeholders on secure technology solutions and risk-informed decision-making.
Apply frameworks and standards such as NIST, ISO, ITIL, and COBIT to strengthen security controls and support regulatory compliance.
Partner with cross-functional teams to evaluate new and changing technology solutions and integrate cybersecurity requirements.
Coach, mentor, and develop less experienced team members.
Build and maintain business relationships that enable collaboration, stakeholder trust, and measurable business value.
Drive proactive cybersecurity improvements while balancing business objectives and security requirements.
Support and execute adversary emulation, purple-team, and security validation activities across enterprise environments.
Operate and maintain BAS and adversary-emulation platforms to validate defensive controls and identify detection gaps.
Conduct security testing of cloud, hybrid, and on-premises environments to identify exploitable weaknesses and security control deficiencies.
Partner with Threat Intelligence and Threat Hunting teams to emulate relevant attacker behaviors, techniques, and procedures.
Assist in developing repeatable attack scenarios aligned with MITRE ATT&CK techniques and organizational threat priorities.
Coordinate with defensive security teams during purple-team exercises to validate detection and response capabilities.
Help automate offensive testing workflows, validation processes, and operational reporting through scripting and tooling enhancements.
Document findings, attack paths, detection gaps, and remediation recommendations clearly and actionably.
Contribute to continuous improvement of proactive security validation capabilities, processes, and operational maturity.
Support offensive cyber operations initiatives, including targeted assessments, adversary simulation activities, and security research.
Support engineering and development of remedial workflows for findings generated by adversarial and offensive activities.