IT Security Engineer at Phinia in Auburn Hills PHINIA WHQ, MI

Job description

ABOUT US PHINIA: Advancing sustainability today, powering a cleaner tomorrow. PHINIA is a diversified industrial supplier and global leader in the development of fuel systems, electrical systems, and aftermarket solutions, with a strong portfolio of trusted brands that includes DELPHI®, DELCO REMY®, and HARTRIDGE™. With over 100 years of manufacturing expertise and industry relationships, PHINIA has approximately 12,500 talented employees and over 40 locations in 20 countries and is headquartered in Auburn Hills, Michigan, USA. Read More JOB PURPOSE PHINIA is seeking an IT Security Engineer to support the design, implementation, monitoring, and improvement of PHINIA’s security controls across infrastructure, networks, endpoints, and cloud environments. This role ensures the secure operation of PHINIA’s IT systems by conducting security testing, responding to incidents, executing vulnerability remediation, and supporting enterprise security initiatives. The engineer will work closely with infrastructure, networking, applications, and managed security partners to protect PHINIA from cyber threats and support ongoing security enhancements. This is a hybrid position and candidates will be expected to be in office at least 3 days per week. KEY RESPONSIBILITIES Key Responsibilities Monitor and maintain PHINIA’s enterprise security controls across endpoint protection (EDR/XDR), email security, vulnerability management, identity security, and SIEM/SOC platforms, ensuring continuous threat visibility and protection. Conduct regular security assessments, configuration baselines, system hardening checks, and coordinate remediation activities with infrastructure, cloud, and application teams. Support security incident response, including alert triage, investigation, containment, eradication, and detailed root ‑ cause analysis with follow-up improvements. Review and enhance existing security controls, policies, and configurations to strengthen PHINIA’s Zero Trust posture, cloud readiness, and resilience against advanced threats. Perform log analysis and alert validation across SIEM/XDR/Defender platforms; verify findings from managed security service providers (SOC/MSSP) and ensure proper escalation and closure. Assist in vulnerability scanning, patch validation, configuration drift checks, and lifecycle follow-up activities across infrastructure, applications, and cloud workloads. Support enforcement of secure access protocols such as MFA, Conditional Access, role ‑ based access control, privileged access governance (PIM/JIT) and secure configuration baselines. Maintain and update security documentation including standards, architecture diagrams, SOPs, runbooks, incident playbooks, and forensic guidelines. Collaborate with infrastructure, network, cloud, and application teams to ensure secure system design, secure-by-default configurations, and alignment to PHINIA cybersecurity standards. Participate in DR/BCP testing, breach simulations, tabletop exercises, and resilience drills, contributing to scenario planning and response readiness. Support evaluation, onboarding, and operationalization of new security tools, automation capabilities, SOAR workflows, and detection technologies. Work closely with SOC, EDR, DLP, email security, and managed detection partners to ensure strong, continuous, and effective security operations across global sites. Identify recurring security issues, propose optimization opportunities, improve detection logic, and support the rollout of security awareness and hygiene initiatives across PHINIA. Contribute to security automation initiatives (PowerShell, Python, KQL, SOAR playbooks) to reduce manual effort, improve response time, and enhance detection accuracy What we’re looking for Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or related field 3+ years of experience in IT security, cybersecurity operations, or IT risk management. Solid understanding of cybersecurity fundamentals: