Cyber Security Engineer

ITT Inc. is hiring a Cybersecurity Engineer for its Cybersecurity Operations Center. The role strengthens the organization’s security posture by managing and improving security tools, conducting identity, cloud, container, and acquisition-related security reviews, and supporting threat detection, risk remediation, and security governance.

Responsibilities:

• Identify ways to improve existing investments, augment with future investments, or identify gaps in our program
• Maintain and deploy security controls and tool architecture
• Expand log sources and MDR integrations as needed
• Design and architect new solutions and services
• Increase automation and identify ways to augment existing tasks with AI
• Perform Active Directory and Azure AD configuration audits, utilizing tools such as Ping Castle and Azure AD / Entra Health Reports
• Identify configuration weaknesses related to authentication methods, privileged access, legacy protocols, and identity governance controls
• Support in PAM and RBAC designs/discussions
• Conduct cloud configuration audits across Azure and other cloud platforms, including:
• Identity and access configurations
• Network security groups and routing
• Logging, monitoring, and security control enablement
• Perform Azure container and container platform configuration audits, focusing on:
• Role based access controls
• Network exposure
• Secure defaults and hardening requirements
• Develop and maintain security standard operating procedures, including:
• SOPs and Guides on specific tools
• Project plans
• Business continuity plans
• Support continuous improvement of configuration policies and technical standards
• Conduct configuration and security posture reviews during mergers and acquisitions, including:
• Network and firewall configurations
• Identity platforms
• Cloud environments
• Vulnerability and overall risk landscape
• Identify inherited configuration risks and provide actionable remediation guidance
• Produce clear, risk focused audit findings and remediation recommendations for technical and non technical stakeholders
• Collaborate with infrastructure, network, cloud, and identity teams to validate findings and drive corrective actions
• Support broader cybersecurity risk and governance initiatives as needed

Requirements:

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Networking, or a related field
• Minimum of 5 years of experience in cybersecurity, or another discipline with transferable skills
• The ideal candidate will have a broad set of experiences (IT operation, systems administration, cybersecurity, networking administration, and/or directory services administration) ranging subject matter areas such as incident handling, risk identification and management, and assessments, and IT function administration
• Familiar with common and uncommon security tools and suites
• Familiar with Google SecOps or equivalent SEIMs
• Experienced with MDR and SEIM Management
• Experience auditing Active Directory, Azure AD / Entra ID, and cloud environments
• Familiarity with CIS Benchmarks, configuration hardening standards, and security baselines
• Understanding of configuration‑driven risk versus vulnerability‑scan‑only findings
• Ability to document complex technical findings in clear, defensible language
• Strong MITRE ATT&CK framework knowledge
• Strong investigation skills
• Understand risk sources, potential impacts, and likelihood
• Ability to advise on risk response and mitigations to risk
• Possess the ability to identify insecure ports/protocols
• Strong knowledge of vulnerability management processes and patch management lifecycle
• Analytical mindset and problem-solving skills to prioritize and manage risks effectively
• Collaborative team player with the ability to build strong relationships across departments
• Demonstrated ability to write clear and concise technical documentation and policies
• Ability to multi-task and change priorities with short notice
• High standard of professionalism and ethics
• Professional certifications such as C|EH, CISCP, or SANS certs
• Experience with M&A technical due diligence a plus