Security Specialist

Ericsson•Plano, TX

3d•Hybrid

About The Position

Ericsson is hiring a Security Specialist for its global Cyber Defense Center (CDC), based in the United States. The position is hybrid and requires four days per week in the office. Working hours are 10:30 AM–6:30 PM CT, or 11:30 AM–7:30 PM CT during Daylight Saving Time, with one weekend shift per month. The CDC detects and responds to cyber attacks from external threat actors, with a primary focus on advanced persistent threats. The Security Operations Center provides 24/7 monitoring, triage, incident response, and detection engineering, working with teams in Threat Intelligence, Incident Response & Threat Hunting, AI, Red Team, IT, and Process & Governance. The role triages and responds to prioritized alerts in a follow-the-sun SOC model, collaborates with agentic AI systems, and contributes to SOC improvement and automation. Ericsson does not sponsor U.S. work authorization for this position and does not hire F-1 candidates working on CPT or EAD for it.

Requirements

At least 7 years of experience in triage, incident response, and detection engineering within a SOC environment.
Proficiency with EDR, ITDR, cloud security, SIEM, and exposure management tooling.
Broad technical knowledge across cloud platforms (AWS, GCP, Azure), Linux, Windows, networking, and identity management, with deep expertise in at least one area.
Strong understanding of threat actor TTPs and the ability to recognize indicators in telemetry and logs and determine investigative next steps.
Growth mindset, passion for cybersecurity, and drive to continually learn and improve.
Composure and resilience under pressure, ability to stay focused in high-stress situations, and ability to collaborate effectively with the team.
Professional integrity and commitment to handling confidential information with discretion.

Nice To Haves

CrowdStrike Falcon experience.
SANS/GIAC certifications such as GCFA, GCFE, GCIA, GCIH, and/or GCFR.

Responsibilities

Triage and respond to prioritized alerts in a follow-the-sun SOC model, validate true and false positives, assess malicious activity, and respond according to established plans.
Escalate advanced threat activity to the Incident Response team and support scoping, containment, and eviction.
Collaborate with commercial and in-house agentic AI systems that automate repetitive tasks.
Contribute to SOC improvement and automation, including detection engineering, reinforcement learning, Falcon Fusion workflows, and Foundry app development.
Develop skills through Immersive Labs, on-the-job training, quality review sessions, conferences, and peer collaboration.

Benefits

Competitive compensation package.
Opportunity for an annual bonus through the Short-Term Variable Compensation Plan, subject to eligibility and performance rules.
Opportunity for sales incentives through Ericsson’s Sales Incentive Plan, subject to eligibility and performance rules.
Choice of three medical plan options and a dental plan option, with company credits toward premiums for employees and eligible covered dependents.
401(k) plan with an automatic 3% company contribution and matching contributions of up to 4% when the employee contributes at least 5% of eligible pay.
Company credits for basic life insurance, accidental death and dismemberment coverage, and short-term and long-term disability coverage.
Option to participate in Ericsson’s Stock Purchase Plan.
At least 15 days of accrued vacation, up to 3 personal days per year, 11 annual holidays, 8 hours of volunteer time, and 80 hours of sick time annually; paid time off is prorated based on start date.
Up to 16 weeks of paid maternity leave and 6 weeks of paid parental or adoption leave at 100% of pay.
Financial wellness programs, educational assistance, matching gifts, and recognition programs.