[Hiring] IT - Incident Response Engineer @Eaton Corporation

Role Description

Eaton’s Corporate Sector division is currently seeking an IT - Incident Response Engineer. The expected annual salary range for this role is $113,000 - $165,000 a year. This role can sit out of any US Eaton site; however, remote candidates will be considered.

Identify, analyze, and respond to advanced cyber threats and incidents — across on-premises, hybrid, and multi-cloud environments — as a senior member of Eaton's Cyber Security Incident Response Team (CSIRT). Serve as a force-multiplier within the Prevent–Detect–Respond strategy, applying deep incident response and cloud security expertise while advancing the team's next-generation capabilities in agentic AI, automation, detection engineering, and insider threat program. Protect Eaton's intellectual property, operational technology, cloud workloads, and brand across a highly complex, global, multi-technology, regulated, and diversified business environment. This role requires hands-on response capabilities and the aptitude to elevate the broader team's technical maturity.

Responsibilities

• Responsible for the engineering, health, and continuous improvement of detection and response capabilities across cloud and on-premises estates.
• Investigating, analyzing, containing, and remediating cyber threats and security incidents.
• Building the automation and AI-enabled tooling that scales the Security Operations Center (SOC).

What you'll do:

• Provide 24/7/365 (on-call rotation) cyber security incident response.
• Respond to, investigate, and resolve information security issues in accordance with compliance, regulatory, and investigative standards.
• Manage and coordinate response to malicious cyber activity inside or targeting Eaton's assets.
• Perform proactive threat hunting based on emerging indicators of compromise, vulnerabilities, and threat intelligence.
• Lead detection, investigation, and response for cloud security incidents across major platforms (Microsoft Azure, AWS, and/or Google Cloud).
• Develop and tune cloud-native detections using cloud logging and telemetry.
• Apply knowledge of cloud identity and access management, misconfigurations, and cloud attack paths.
• Partner with cloud platform and engineering teams to embed security into cloud architecture.
• Track threat actors and campaigns relevant to Eaton's industry and geography.
• Design, build, and enable agentic AI and automation workflows (SOAR, scripting, AI agents).
• Develop and maintain automated playbooks that reduce mean time to detect and respond.
• Contribute to securing Eaton's adoption of AI.
• Conduct digital forensic analysis and eDiscovery in support of incident response.
• Provide security engineering services, including deployment, configuration, management, and updating of the security tool stack.
• Develop advanced queries, correlation rules, and detections to enhance the organization's detection coverage.
• Contribute to SIEM architecture.

Qualifications

• Bachelor’s Degree from an accredited institution.
• Minimum seven (7) years in security operations, incident response, cloud security, e-Discovery, insider threat, security engineering or related field.
• This position requires use of information or access to hardware which may be subject to the International Traffic in Arms Regulations (ITAR).
• Must be legally authorized to work in the United States without company sponsorship both now and in the future.

Preferred Qualifications

• Demonstrated hands-on experience leading or performing cyber security incident response.
• Hands-on cloud security experience with one or more major platforms.
• Experience correlating events from multiple sources.
• Detection engineering experience and SIEM content development and architecture.
• Experience building automation and/or agentic AI workflows.
• Working knowledge of AI/LLM security concepts.
• Emphasis on experience with digital forensics and eDiscovery tools.
• Solid understanding of adversary TTPs and the MITRE ATT&CK framework.
• Strong analytical and problem-solving skills.

Skills

• Exceptional communication skills.
• Ability to translate complex technical findings into clear, business-relevant language.
• Communicate incident status, risk, and impact with accuracy and transparency.
• Produce clear, concise written deliverables.
• Present confidently and credibly to senior leadership.
• Strong project management, multitasking, and organizational skills.

Benefits

• Various Health and Welfare benefits.
• Retirement benefits.
• Programs that provide for paid and unpaid time away from work.