Detection & Response Analyst

Trane Italia•Davidson, NC

2d•Hybrid

About The Position

Be a part of our mission! As a world leader in creating comfortable, sustainable, and efficient climate solutions for buildings, homes and transportation, it's our responsibility to put the planet first. For us at Trane Technologies, and through our businesses including Trane® and Thermo King, sustainability is not just how we do business—it is our business. Do you dare to look at the world's challenges and see impactful possibilities? Do you want to contribute to making a better future? If the answer is yes, we invite you to consider joining us in boldly challenging what's possible for a sustainable world. Learn about our benefits designed for you to Thrive at work and at home. We boldly go. Where is the work: Monday to Thursday, work onsite with your colleagues. Fridays, choose your work location, balancing what your work requires.

Requirements

Bachelor’s degree in a related field and/or equivalent working experience in cybersecurity
Proven experience (5-7 years) in security operations or equivalent roles, including hands-on technical experience performing incident response and/or threat intelligence analysis
Strong knowledge of attacker methodologies, tools, and techniques in the cyber security space
A firm understanding of incident response processes, security analysis, and cybersecurity threat intelligence (CTI)
Familiarity with cyber security frameworks such as NIST CSF and NIST SP 800-61
Excellent problem-solving, analytical, and critical thinking skills
Strong communication and interpersonal skills to effectively collaborate with different teams

Nice To Haves

Advanced certifications such as those from SANS/GIAC, CISSP or CASP, and/or vendor-specific training and certifications are highly desirable
Up-to-date knowledge of emerging cyber threats, attack vectors, and vulnerabilities

Responsibilities

Take ownership of coordinating cyber security incidents in both IT and OT environments, helping guide response efforts, and coordinating activities across teams
Quickly assess and prioritize threats, escalate critical incidents, and drive timely and effective incident resolution
Document investigation findings including analyses of incidents with root cause, containment, and remediation/prevention recommendations, and coordinate after-action reviews and lessons learned activities across multiple teams
Provide real-time insight into the prioritization and evaluation of relevant intelligence for Cybersecurity & Infrastructure to maintain pace with emerging risks and active threats related to the company’s technology and vendor stack
Create intelligence bulletins and analysis of critical and high-severity vulnerabilities that may impact the organization
Research and disseminate analysis for industry-specific threat activity that will increase the organization’s situational awareness, including executive reports and recommendations for preventative controls
Enhance the organization’s understanding of how threats and vulnerabilities can impose risk on users, data, and assets.
Help build and mature existing CTI capabilities, processes, and platforms