IT Security Engineer

ABOUT US
PHINIA: Advancing sustainability today, powering a cleaner tomorrow.
PHINIA is a diversified industrial supplier and global leader in the development of fuel systems, electrical systems, and aftermarket solutions, with a strong portfolio of trusted brands that includes DELPHI®, DELCO REMY®, and HARTRIDGE™. With over 100 years of manufacturing expertise and industry relationships, PHINIA has approximately 12,500 talented employees and over 40 locations in 20 countries and is headquartered in Auburn Hills, Michigan, USA. Read More
JOB PURPOSE
PHINIA is seeking an IT Security Engineer to support the design, implementation, monitoring, and improvement of PHINIA’s security controls across infrastructure, networks, endpoints, and cloud environments. This role ensures the secure operation of PHINIA’s IT systems by conducting security testing, responding to incidents, executing vulnerability remediation, and supporting enterprise security initiatives. The engineer will work closely with infrastructure, networking, applications, and managed security partners to protect PHINIA from cyber threats and support ongoing security enhancements. This is a hybrid position and candidates will be expected to be in office at least 3 days per week.
KEY RESPONSIBILITIES
Key Responsibilities
Monitor and maintain PHINIA’s enterprise security controls across endpoint protection (EDR/XDR), email security, vulnerability management, identity security, and SIEM/SOC platforms, ensuring continuous threat visibility and protection.
Conduct regular security assessments, configuration baselines, system hardening checks, and coordinate remediation activities with infrastructure, cloud, and application teams.
Support security incident response, including alert triage, investigation, containment, eradication, and detailed root‑cause analysis with follow-up improvements.
Review and enhance existing security controls, policies, and configurations to strengthen PHINIA’s Zero Trust posture, cloud readiness, and resilience against advanced threats.
Perform log analysis and alert validation across SIEM/XDR/Defender platforms; verify findings from managed security service providers (SOC/MSSP) and ensure proper escalation and closure.
Assist in vulnerability scanning, patch validation, configuration drift checks, and lifecycle follow-up activities across infrastructure, applications, and cloud workloads.
Support enforcement of secure access protocols such as MFA, Conditional Access, role‑based access control, privileged access governance (PIM/JIT) and secure configuration baselines.
Maintain and update security documentation including standards, architecture diagrams, SOPs, runbooks, incident playbooks, and forensic guidelines.
Collaborate with infrastructure, network, cloud, and application teams to ensure secure system design, secure-by-default configurations, and alignment to PHINIA cybersecurity standards.
Participate in DR/BCP testing, breach simulations, tabletop exercises, and resilience drills, contributing to scenario planning and response readiness.
Support evaluation, onboarding, and operationalization of new security tools, automation capabilities, SOAR workflows, and detection technologies.
Work closely with SOC, EDR, DLP, email security, and managed detection partners to ensure strong, continuous, and effective security operations across global sites.
Identify recurring security issues, propose optimization opportunities, improve detection logic, and support the rollout of security awareness and hygiene initiatives across PHINIA.
Contribute to security automation initiatives (PowerShell, Python, KQL, SOAR playbooks) to reduce manual effort, improve response time, and enhance detection accuracy
What we’re looking for
Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field
3+ years of experience in IT security, cybersecurity operations, or IT risk management.
Solid understanding of cybersecurity fundamentals: network security, endpoint protection, authentication, encryption, security protocols, and hardening standards
Hands‑on experience across security operations, including Endpoint Detection & Response (CrowdStrike or similar), email security (Proofpoint), Data Loss Prevention (DLP), vulnerability management platforms (Qualys, Rapid7, Tenable), and SIEM/SOC alert investigation
Familiarity with Zero Trust concepts, identity governance, MFA, Conditional Access, and modern authentication protocols (OAuth/SAML).
Good working knowledge of infrastructure, Windows/Linux OS, network basics, and cloud environments (Azure preferred).
Experience working within ITIL-driven environments and following structured Incident/Problem/Change processes
Security+ (CompTIA) — preferred
CYSA+ or PenTest+ — nice to have
AZ‑500: Microsoft Azure Security Engineer — plus
CCSP or CISSP Associate — preferred for modern cloud/hybrid environments
EQUAL EMPLOYMENT OPPORTUNITY
PHINIA is an equal employment opportunity employer such that all qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity/expression, national origin, disability or protected veteran status.
VISA SPONSORSHIP
For this role, applicants must be currently authorized to work on a full-time basis in the country where the position is based. Only in certain circumstances, based on business need, does PHINIA provide sponsorship for employment visa status.
NO UNAUTHORIZED REFERRALS
PHINIA does not accept unsolicited resumes from recruitment agencies or third-party vendors. Any recruitment partnership must be approved in writing by Human Resources before candidate submissions are made.
GLOBAL TERMS OF USE AND PRIVACY STATEMENT
Carefully read the PHINIA Privacy Policy before using this website. Your ability to access and use this website and apply for a job at PHINIA are conditioned on your acceptance and compliance with these terms.
Please access the linked document by clicking here, select the geographical area where you are applying for employment, and review.
Before submitting your application you will be asked to confirm your agreement with the terms.
Career Scam Disclaimer:
PHINIA makes no representations or guarantees regarding employment opportunities listed on any third-party website. To protect against career scams, job applicants should take the necessary precautions when interviewing for and accepting employment positions allegedly offered by PHINIA. Applicants should never provide their national ID numbers, birth dates, credit card numbers, bank account information or other private information when communicating with prospective employers or responding to employment opportunities online. Job applicants are invited to contact PHINIA through PHINIA’s website to verify the authenticity of any employment opportunities.
Advancing sustainability today, powering a cleaner tomorrow. Join us on this shared journey to a brighter tomorrow. For more information about PHINIA, please visit www.phinia.com.