IT Security Analyst

BorgWarner • Auburn Hills, MI

1d • $62,000 - $85,250

About The Position

Working as part of BorgWarner’s Security Operations Team, the Security Analyst helps build, maintain, and optimize security tools, develop detection capabilities, and drive automation to improve response efficiency. The role strengthens BorgWarner’s security posture in an evolving threat landscape and supports global cybersecurity operations by detecting, analyzing, and responding to threats across the enterprise. The position helps protect the integrity of systems and data through multilayered security tooling, continuous monitoring, and incident response.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field.
• At least 2 years of IT Security experience, focused on incident response and security operations.
• Strong understanding of security principles, threat landscapes, and incident response.
• Experience with SIEM, EDR, DLP, vulnerability management (VM), email security, and threat intelligence platforms.
• Fluent written and spoken English.
• Deep understanding of security systems, firewalls, authentication systems, log management, content filtering, network security, and networking technologies.
• Experience working with and managing at least one of the following technologies: SIEM, EDR, DLP, VM, or email security.
• Knowledge of advanced threats, information security incident detection and response, and forensic investigative practices.
• Experience developing, collecting, and analyzing threat intelligence.
• Experience in AI and autonomous response.
• Experience with cyber intelligence analytic methodologies such as Kill Chain, threat modeling, and threat hunting.
• Ability to identify problems and significant threats and risks, connect data, trace possible causes, and investigate relevant information.
• Uphold generally accepted social and ethical standards in job-related activities.
• Strong written, oral, and presentation skills.

Nice To Haves

• Relevant certifications such as Sec+, GSEC, GCIA, CEH, or CISSP.
• Relevant experience in an international environment.

Responsibilities

• Respond to, remediate, and coordinate incident response actions with internal and external stakeholders.
• Monitor security alerts and logs from SIEM and other security alerting tools.
• Create searches and reports to help prevent disruption or unavailability of information assets and assess impact.
• Analyze security attacks and determine or advise on solutions, including configuring security tools.
• Use AI-powered security operations platforms to investigate, correlate, and triage security events.
• Develop, validate, and optimize AI-assisted detection and response workflows.
• Verify the accuracy of AI-generated findings through analyst review.
• Partner with engineering teams to automate investigation and response processes using agentic workflows.
• Develop and maintain technical runbooks and process documents.
• Analyze suspicious activities and attempted attacks during and after incidents, including malware, packets, alerts, and logs, to identify malicious activity.
• Monitor and investigate security events across cloud platforms and SaaS applications.
• Investigate identity-based attacks, account compromise, MFA bypass attempts, and privilege escalation events.
• Keep current with incident response technology, methodology, and legal requirements.
• Develop scripts and automation to streamline security operations tasks.
• Ensure investigations comply with regulatory requirements and internal corporate policies, standards, and procedures.
• Provide management metrics and periodic intelligence reports and lessons learned about threat actors and indicators of compromise.
• Continuously improve intelligence sources and methods, and recommend tools and procedures to detect threats and protect intellectual property and assets.
• Maintain and optimize security tools, including endpoint protection, EDR, DLP, and email security.
• Assist with formal investigations or inquiries involving insider threats and acceptable use policy violations.
• Identify internal process improvements and possible solutions.
• Work with the Security Operations Lead to define and document standard operating procedures for incident handling, malware analysis, vulnerability management, and related activities.
• Maintain confidentiality of professional information and the security of documents handled and administered.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level