Regional SOC (Security Operations Center) Incident Response Engineer

Liebherr is a distinguished international manufacturing company with a strong presence in the United States since 1970. Known for its excellence in engineering and production, Liebherr operates multiple subsidiaries across diverse industries including aerospace, mining equipment, automation systems, and gear technology. The company started its U.S. journey with hydraulic excavators manufacturing in Newport News, Virginia, and later transitioned to producing mining trucks, solidifying its position as a key player in heavy machinery and equipment manufacturing. Liebherr's U.S.-based operations include Liebherr Mining Equipment Newport News, Liebherr-Aerospace Saline, Inc., Liebherr Gear Technology, Inc., Liebherr Automation Systems, Co., and Liebherr USA, Co., which oversees twelve different product segments nationwide. The company prides itself on innovation, quality, and a commitment to safety and environmental responsibility, providing a secure and engaging work environment for its employees.

The Regional Security Operations Center (SOC)/Incident Response Engineer position at Liebherr is a critical role focused on safeguarding the company's informational and technological assets within the Americas region. This role is office-based, offered in either Newport News, VA, or Saline, MI, and comes with a competitive salary range of $96,000 to $124,000. The ideal candidate will be part of the global SOC team responsible for the continuous monitoring, detection, analysis, and response to security incidents. The primary mission is to implement and maintain security controls and systems, such as firewalls, intrusion detection/prevention systems (IDS/IPS), and Security Information and Event Management (SIEM) tools, ensuring the resilience and security of the organization's infrastructure. By diligently analyzing alerts and logs, the engineer identifies true positives, prioritizes incidents based on severity, and collaborates with various security teams to resolve issues promptly during security events.

This role also plays an essential part in supporting Information Security Governance by providing vital insights and expertise, contributing towards the establishment and maintenance of robust security policies and procedures. Documentation of incident details, findings, and remediation steps must be precise, reflecting the critical nature of incident response, while ensuring the availability and optimal performance of SOC tools regionally. Collaboration extends beyond local teams to the Corporate IT departments and divisions, as well as the global SOC team, enhancing a collective defense strategy against cyber threats. Reporting functionally to the Head of the Global SOC, the role demands strong communication, analytical, and decision-making skills. Occasional domestic and international travel may be required, and the candidate must possess a valid driver’s license and passport. This position offers a secure work environment with comprehensive benefits including major medical, dental, and vision insurance, a 401K plan with company match, paid vacation, and personal days, making it a rewarding and stable career opportunity for experienced cybersecurity professionals committed to excellence in security operations.