IT Security Engineer

PHINIA: Advancing sustainability today powering a cleaner tomorrow.

PHINIA is a diversified industrial supplier and global leader in the development of fuel systems electrical systems and aftermarket solutions with a strong portfolio of trusted brands that includes DELPHI DELCO REMY and HARTRIDGE. With over 100 years of manufacturing expertise and industry relationships PHINIA has approximately 12500 talented employees and over 40 locations in 20 countries and is headquartered in Auburn Hills Michigan USA. Read More

JOB PURPOSE

PHINIA is seeking an IT Security Engineer to support the design implementation monitoring and improvement of PHINIAs security controls across infrastructure networks endpoints and cloud environments. This role ensures the secure operation of PHINIAs IT systems by conducting security testing responding to incidents executing vulnerability remediation and supporting enterprise security initiatives. The engineer will work closely with infrastructure networking applications and managed security partners to protect PHINIA from cyber threats and support ongoing security enhancements. This is a hybrid position and candidates will be expected to be in office at least 3 days per week.

KEY RESPONSIBILITIES

Key Responsibilities

• Monitor and maintain PHINIAs enterprise security controls across endpoint protection (EDR/XDR) email security vulnerability management identity security and SIEM/SOC platforms ensuring continuous threat visibility and protection.
• Conduct regular security assessments configuration baselines system hardening checks and coordinate remediation activities with infrastructure cloud and application teams.
• Support security incident response including alert triage investigation containment eradication and detailed rootcause analysis with follow-up improvements.
• Review and enhance existing security controls policies and configurations to strengthen PHINIAs Zero Trust posture cloud readiness and resilience against advanced threats.
• Perform log analysis and alert validation across SIEM/XDR/Defender platforms; verify findings from managed security service providers (SOC/MSSP) and ensure proper escalation and closure.
• Assist in vulnerability scanning patch validation configuration drift checks and lifecycle follow-up activities across infrastructure applications and cloud workloads.
• Support enforcement of secure access protocols such as MFA Conditional Access rolebased access control privileged access governance (PIM/JIT) and secure configuration baselines.
• Maintain and update security documentation including standards architecture diagrams SOPs runbooks incident playbooks and forensic guidelines.
• Collaborate with infrastructure network cloud and application teams to ensure secure system design secure-by-default configurations and alignment to PHINIA cybersecurity standards.
• Participate in DR/BCP testing breach simulations tabletop exercises and resilience drills contributing to scenario planning and response readiness.
• Support evaluation onboarding and operationalization of new security tools automation capabilities SOAR workflows and detection technologies.
• Work closely with SOC EDR DLP email security and managed detection partners to ensure strong continuous and effective security operations across global sites.
• Identify recurring security issues propose optimization opportunities improve detection logic and support the rollout of security awareness and hygiene initiatives across PHINIA.
• Contribute to security automation initiatives (PowerShell Python KQL SOAR playbooks) to reduce manual effort improve response time and enhance detection accuracy

What were looking for

• Bachelors degree in Information Technology Cybersecurity Computer Science or related field
• 3 years of experience in IT security cybersecurity operations or IT risk management.
• Solid understanding of cybersecurity fundamentals: network security endpoint protection authentication encryption security protocols and hardening standards
• Handson experience across security operations including Endpoint Detection & Response (CrowdStrike or similar) email security (Proofpoint) Data Loss Prevention (DLP) vulnerability management platforms (Qualys Rapid7 Tenable) and SIEM/SOC alert investigation
• Familiarity with Zero Trust concepts identity governance MFA Conditional Access and modern authentication protocols (OAuth/SAML).
• Good working knowledge of infrastructure Windows/Linux OS network basics and cloud environments (Azure preferred).
• Experience working within ITIL-driven environments and following structured Incident/Problem/Change processes
• Security (CompTIA) preferred
• CYSA or PenTest nice to have
• AZ500: Microsoft Azure Security Engineer plus
• CCSP or CISSP Associate preferred for modern cloud/hybrid environments

EQUAL EMPLOYMENT OPPORTUNITY

PHINIA is an equal employment opportunity employer such that all qualified applicants will receive consideration for employment without regard to race color age religion sex sexual orientation gender identity/expression national origin disability or protected veteran status.

VISA SPONSORSHIP

For this role applicants must be currently authorized to work on a full-time basis in the country where the position is based. Only in certain circumstances based on business need does PHINIA provide sponsorship for employment visa status.

NO UNAUTHORIZED REFERRALS

PHINIA does not accept unsolicited resumes from recruitment agencies or third-party vendors. Any recruitment partnership must be approved in writing by Human Resources before candidate submissions are made.

GLOBAL TERMS OF USE AND PRIVACY STATEMENT

Please access the linked document by clicking here select the geographical area where you are applying for employment and review.

Before submitting your application you will be asked to confirm your agreement with the terms.

Career Scam Disclaimer:

PHINIA makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by PHINIA. Applicants should never provide their national ID numbers birth dates credit card numbers bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact PHINIA through PHINIAs website to verify the authenticity of any employment opportunities.

Advancing sustainability today powering a cleaner tomorrow. Join us on this shared journey to a brighter tomorrow. For more information about PHINIA please visit .