Cybersecurity Specialist

As part of the Pratt Cybersecurity Team, you will support and enhance cybersecurity operations, threat detection capabilities, and overall security maturity. You will partner closely with a third-party Managed Security Services Provider (MSSP) to detect, investigate, and respond to cybersecurity threats. In addition, you will lead the vulnerability management lifecycle process, coordinate remediation efforts across IT teams, improve security processes and technologies, and help strengthen Pratt’s cyber resilience. This position requires a proactive security professional who can balance operational responsibilities with strategic initiatives focused on continuous improvement and risk reduction.

The Pratt Cybersecurity Team facilitates business growth through developing and deploying secure solutions to safeguard assets while supporting resilient operations across a distributed manufacturing plant environment.

Key Responsibilities:

• Respond to and manage security events, working to contain, investigate root cause, recover from attacks, and create incident reports for senior management. Develop workflows and automations to improve the security response process.
• Work closely with the MSSP to monitor, triage, investigate, and respond to security alerts. Coordinate containment, eradication, recovery, and post-incident activities. Conduct root cause analysis and document incident findings, lessons learned, and corrective actions.
• Configure, troubleshoot and maintain security infrastructure software and hardware including endpoint, network, identity, and logging systems.
• Own and manage the enterprise vulnerability management program. Manage vulnerability management infrastructure and run periodic vulnerability scans. Review vulnerability data and coordinate with IT teams to ensure necessary patches and fixes are applied
• Collaborate with other IT team members to develop new protocols, layers of protection, and other proactive and defensive systems to remaining ahead of cyber adversaries
• Oversee the collection and management of metrics and management dashboards to ensure effective/efficient cyber security operations
• Identify opportunities to improve security controls, operational processes, and overall cyber defense capabilities. Research, evaluate, recommend, and deploy new security technologies, processes, and methodologies
• Contribute to security standards, policies, procedures, and technical documentation.
  
  

Job Requirements:

• Bachelor’s degree in cybersecurity, IT, computer science, or a related field
• 3-7 years of experience in managing cybersecurity technology systems, solutions, products, and services within a large, distributed and complex technology environment
• Background working with Incident Response and/or Security Operations Center (SOC) teams
• Experience with extended detection and response (XDR)/SIEM platforms such as Google SecOps
• Experience with the M365 security suite, including Microsoft Defender, Purview, Intune, Entra.
• Experience with vulnerability management tools such as Tenable Nessus or similar.
• Scripting and /or development ability to customize existing security tools (PowerShell, Python, BASH, SQL)
• Strong interpersonal, oral and written communication and collaboration skills
• One or more of the following certifications: CISSP, CISM, CompTIA Security+, GSEC
  
  

Desired Qualifications:

• Experience with Cisco Umbrella
• OT security experience, particularly in a manufacturing environment
• Cloud security engineering expertise, particularly AWS
• Network security experience
• Experience with the NIST risk management framework (RMF)
• Familiarity with Zero Trust architecture principles
• Bachelor’s degree in cybersecurity, IT, computer science, or a related field
• 3-7 years of experience in managing cybersecurity technology systems, solutions, products, and services within a large, distributed and complex technology environment
• Background working with Incident Response and/or Security Operations Center (SOC) teams
• Experience with extended detection and response (XDR)/SIEM platforms such as Google SecOps
• Experience with the M365 security suite, including Microsoft Defender, Purview, Intune, Entra.
• Experience with vulnerability management tools such as Tenable Nessus or similar.
• Scripting and /or development ability to customize existing security tools (PowerShell, Python, BASH, SQL)
• Strong interpersonal, oral and written communication and collaboration skills
• One or more of the following certifications: CISSP, CISM, CompTIA Security+, GSEC
  
  

Desired Qualifications:

• Experience with Cisco Umbrella
• OT security experience, particularly in a manufacturing environment
• Cloud security engineering expertise, particularly AWS
• Network security experience
• Experience with the NIST risk management framework (RMF)
• Familiarity with Zero Trust architecture principles