Incident Response Engineer

Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.

We welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!

Job Description

We are seeking an experienced Level 3 Cybersecurity Analyst to join our Cybersecurity Security Incident Response Team (CSIRT). This senior-level role is responsible for advanced threat detection, incident response, and security operations, ensuring the integrity and availability of enterprise systems. The Level 3 analyst will act as an escalation point for complex security incidents, lead investigations, and contribute to the continuous improvement of cybersecurity processes and defenses.

Your Responsibilities

Threat Detection & Incident Response

• Lead the investigation, containment, eradication, and recovery of advanced cyber threats and security incidents.
• Serve as the final escalation point for Level 1 and Level 2 analysts, providing guidance and mentorship.
• Utilize threat intelligence, SIEM platforms, EDR solutions, and other security tools to analyze and mitigate security events.
• Conduct root cause analysis (RCA) and forensic investigations to determine attack vectors and impact.
• Develop and implement advanced detection rules, correlation searches, and playbooks for threat hunting.

Security Operations & Monitoring

Threat Intelligence & Research

Security Engineering & Automation

Compliance & Reporting

Required Qualifications

Technical Skills & Expertise

Soft Skills

Why Join Us?

If you are a cybersecurity expert ready to take on advanced threats and lead critical investigations, we encourage you to apply!

What We Offer :

Our benefits package includes …

#LI-Hybrid

#LI-PS2

Rockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.