{"id":2867593,"url":"https://alion.io/job/itt-cyber-security-engineer","title":"Cyber Security Engineer","company":{"id":2708,"name":"ITT","domain":"itt.com","url":"https://alion.io/company/itt","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"US time zones","utc_offset_min":-8,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":99900,"max":149100,"currency":"USD","period":"year","gross":null,"usd_annual":149100},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Google SecOps","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PingCastle","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-19T18:17:50Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-24T03:07:04Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"About ITT:\nITT Inc. (NYSE: ITT) is a diversified global leading manufacturer of highly engineered critical components and customized technology solutions serving the flow, aerospace and defense, transportation, industrial, and energy markets. Through operational execution, innovation, and disciplined capital deployment, including strategic acquisitions such as SPX FLOW, ITT partners with its customers to deliver enduring solutions to the key industries that underpin our modern way of life.\nHeadquartered in Stamford, Connecticut, ITT has a market cap of roughly $20 billion and employs more than 15,000 people across 40 countries and serves customers in approximately 125 countries. Following the acquisition of SPX FLOW, the company is expected to generate $5.4 billion in annual revenue.\nOur businesses are organized in three distinct segments, each based around our core engineering DNA:\nFlow Technologies: A global leader in, providing a broad portfolio of pumps, valves, mixing and agitation equipment, heat transfer, homogenizers, separation, water and wastewater treatment, and engineered process solutions.Our leading brands include the iconic Goulds Pumps (with more than 175 years of history), Anhydro, APV, Bornemann, Bran+Luebbe, C’treat, Engineered Valves, Gerstenberg Schröder, Habonim, Johnson Pump, Lightnin, Philadelphia, Plenty, PRO Cast, Rheinhütte, Seital Separation, Stelzer, Svanehøj, Tigerholm, Uutechnic, VIDAR, Waukesha Cherry-Burrell.\nMotion Technologies: A global leader in brake pads (ICE and electrified brake pads) and shock absorbers (energy absorption solutions) for transportation applications. Our leading brands include Friction Technologies, KONI and Axtone.\nConnect and Control Technologies: A leader in critical applications for the aerospace, defense and industrial markets, including harsh environment connectors and control components. Our leading brands includeITT Cannon, Enidine, Aerospace Controls and kSARIA.\nPosition Summary\nThe Cybersecurity Operations Center (CSOC) has an opening for a cybersecurity Engineer which has primary areas of responsibility in deploying, configuring, and enhancing existing security tools, threat hunting and looking for advanced persistent threats.\nThis role involves monitoring security events, identifying vulnerabilities, conducting risk assessments, and deploying security controls to prevent unauthorized access, data breaches, and malicious activity. Cybersecurity Engineers work closely with IT, infrastructure, and business teams to ensure security best practices are integrated into daily operations and that regulatory, compliance, and organizational security requirements are met.\nThe Cybersecurity Engineer also plays a key role in incident response, threat detection, and continuous improvement of the organization's security posture. Responsibilities include managing security tools such as endpoint protection platforms, Email Security, SASE/SSE, SIEM solutions, and identity and access management systems; analyzing emerging threats; developing security standards and procedures; and supporting security awareness initiatives. Successful candidates possess strong technical expertise in cybersecurity principles, excellent problem-solving skills, and the ability to effectively communicate security risks and recommendations to both technical and non-technical stakeholders.\nREMOTE POSITION - IDEAL CANDIDATE IN EASTERN OR CENTRAL US TIME ZONES.\nEssential Responsibilities\nSecurity Tool Management & Expansion\nIdentify ways to improve existing investments, augment with future investments, or identify gaps in our program\nMaintain and deploy security controls and tool architecture\nExpand log sources and MDR integrations as needed.\nDesign and architect new solutions and services\nIncrease automation and identify ways to augment existing tasks with AI\nIdentity & Directory Services\nPerform Active Directory and Azure AD configuration audits, utilizing tools such as Ping Castle and Azure AD / Entra Health Reports\nIdentify configuration weaknesses related to authentication methods, privileged access, legacy protocols, and identity governance controls.\nSupport in PAM and RBAC designs/discussions\nCloud & Container Security\nConduct cloud configuration audits across Azure and other cloud platforms, including:\no Identity and access configurations\no Network security groups and routing\no Logging, monitoring, and security control enablement\nPerform Azure container and container platform configuration audits, focusing on:\no Role based access controls\no Network exposure\no Secure defaults and hardening requirements\nDocumentation Maintenance.\nDevelop and maintain security standard operating procedures, including:\no SOPs and Guides on specific tools\no Project plans\no Business continuity plans\nSupport continuous improvement of configuration policies and technical standards.\nMergers, Acquisitions & Third Party Reviews\nConduct configuration and security posture reviews during mergers and acquisitions, including:\no Network and firewall configurations\no Identity platforms\no Cloud environments\no Vulnerability and overall risk landscape\nIdentify inherited configuration risks and provide actionable remediation guidance.\nReporting & Collaboration\nProduce clear, risk focused audit findings and remediation recommendations for technical and non technical stakeholders.\nCollaborate with infrastructure, network, cloud, and identity teams to validate findings and drive corrective actions.\nSupport broader cybersecurity risk and governance initiatives as needed.\nPosition Requirements\nEducation: Bachelor’s degree in computer science, Information Technology, Cybersecurity, Networking, or a related field; Professional certifications such as C|EH, CISCP, or SANS certs preferred.\nExperience: Minimum of 5 years of experience in cybersecurity, or another discipline with transferable skills. The ideal candidate will have a broad set of experiences (IT operation, systems administration, cybersecurity, networking administration, and/or directory services administration) ranging subject matter areas such as incident handling, risk identification and management, and assessments, and IT function administration.\nSkills/Knowledge:\nFamiliar with common and uncommon security tools and suites.\nFamiliar with Google SecOps or equivalent SEIMs\nExperienced with MDR and SEIM Management\nExperience auditing Active Directory, Azure AD / Entra ID, and cloud environments\nFamiliarity with CIS Benchmarks, configuration hardening standards, and security baselines\nUnderstanding of configuration-driven risk versus vulnerability-scan-only findings\nExperience with M&A technical due diligence a plus\nAbility to document complex technical findings in clear, defensible language\nStrong MITRE ATT&CK framework knowledge\nStrong investigation skills\nUnderstand risk sources, potential impacts, and likelihood.\nAbility to advise on risk response and mitigations to risk.\nPossess the ability to identify insecure ports/protocols.\nStrong knowledge of vulnerability management processes and patch management lifecycle.\nAnalytical mindset and problem-solving skills to prioritize and manage risks effectively.\nCollaborative team player with the ability to build strong relationships across departments.\nDemonstrated ability to write clear and concise technical documentation and policies.\nAbility to multi-task and change priorities with short notice.\nHigh standard of professionalism and ethics.\nEqual Pay Act Statement\nWe aim to pay our ‘ITT’ers’ fairly and competitively in the locations that they live and work. Pay-for-performance is a principle that we believe in, and employees are rewarded based not only on ‘what’ they accomplish, but also on ‘how’ they reflect ITT’s values. ITT offers a competitive salary and robust total rewards package, such as health insurance, 401(k), short and long-term disability, paid time off, growth and developmental opportunities, and other incentive compensation programs. Specific benefits are dependent upon whether or not the position is part of a collective-bargaining agreement. The salary offered to a candidate is based several factors such as candidate experience and qualifications, location, as well as market and business considerations.Equal Pay Act Range\nAnnual salary range is from $99,900 - $149,100.00 plus benefits & incentive plans. $99,900 - $149,100.00","description_format":"text","description_chars":8390,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Industrial Machinery","Information Security","Precision Engineering"],"lifecycle":[{"event":"open","at":"2026-10-19T18:17:50Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.897,"p_room":1,"age_days":3,"expected_fill_days":14,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-23T05:54:15Z"},"pay":{"stated_usd_annual":149100,"is_top_pay":false},"html_url":"https://alion.io/job/itt-cyber-security-engineer","json_url":"https://alion.io/job/itt-cyber-security-engineer.json","meta":{"generated_at":"2026-10-24T03:19:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5193,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2708},"rest":"https://alion.io/mcp/rest/get_company?id=2708"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fitt-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fitt-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fitt-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/itt-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fitt-cyber-security-engineer"}]}