[Hiring] Cybersecurity Specialist III @LG Energy Solution Michigan, Inc.

Role Description

The Cybersecurity Specialist III is a senior individual contributor on the enterprise cybersecurity team at LG Energy Solution Vertech (LGESVT), reporting to the Lead Cybersecurity Engineer. The role carries day-to-day responsibility for security operations across LGESVT’s enterprise estate:

• Incident triage and response
• SIEM query development and tuning
• Vulnerability remediation
• Endpoint detection
• Cloud security in AWS
• Identity and access management

The role spans the full breadth of enterprise security operations rather than a single specialized area, and carries meaningful autonomy within each domain. The Specialist III operates independently on day-to-day security operations and works closely with the Lead Cybersecurity Engineer on complex engineering and incident response work.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field. Equivalent practical experience will be considered.
• One or more of the following preferred:
  • AWS Certified Security – Specialty
  • AWS Certified Solutions Architect – Associate
  • GIAC (GSEC, GCIH, or GCIA)
  • CompTIA CySA+ or Security+
  • Microsoft SC-200
• Candidates actively working toward an advanced certification are encouraged to apply; certification support is available.
• Minimum 4 years of hands-on experience in a security operations, security analyst, or cybersecurity specialist role.
• Demonstrated experience performing incident response, including alert triage, investigation to root cause, and written documentation of findings.
• Hands-on SIEM experience, including writing and tuning queries and working directly with log data (Microsoft Sentinel, Splunk, Elastic, or equivalent).
• Practical vulnerability management experience, including risk-based prioritization and coordinating remediation with system owners.
• Working experience with EDR platforms, including custom rule creation and analysis of endpoint telemetry.
• Strong working knowledge of AWS services and core cloud security practices, including IAM, logging, monitoring, and posture management.
• Applied understanding of identity and access management, including SSO, MFA, and least-privilege access models.
• Experience performing or materially contributing to security risk assessments.

Requirements

• Clear technical writing — incident documentation, risk findings, and remediation guidance that a non-specialist owner can act on without translation.
• Strong working knowledge of Windows and Linux, and the security controls associated with each.
• Scripting and query ability for automation and data analysis (Python, PowerShell, KQL, or SPL).
• Familiarity with risk management and control frameworks: NIST CSF, ISO 27001, SOC 2, and CIS Controls.
• Sound judgment under time pressure, with the discipline to escalate appropriately when information is incomplete.

Preferred Attributes

• Experience in the energy, utilities, or industrial sectors, or exposure to OT/ICS environments.
• Familiarity with battery energy storage, renewable energy, or grid-scale infrastructure.
• Prior exposure to ISO 27001 or SOC 2 audit cycles as an evidence provider.
• Hands-on experience with Microsoft Entra ID, Microsoft Defender, or Microsoft Purview.
• Demonstrated interest in detection engineering, security automation, or infrastructure-as-code.