ITOT Security Engineer (Mid-Level)

Job Description:

At DXC we harness the power of technology to deliver mission-critical IT services that our clients need to modernize operations and drive innovation across their entire IT estate. We provide services through the Enterprise Technology Stack for business process outsourcing analytics and engineering applications security cloud IT Outsourcing and Modern Workplace.

About the Role

Responsible for supporting and operating cybersecurity controls across IT and OT environments. The professional will work with endpoint security vulnerability management patching SOC operations firewall administration OT monitoring and industrial cybersecurity technologies while collaborating with senior engineers and architects.

Key Responsibilities
Support security operations across IT and OT environments.
Participate in security projects and continuous improvement initiatives.
Execute operational security tasks and remediation activities.
Assist in incident response and investigations.
Produce operational reports and documentation.
Collaborate with infrastructure networking and OT teams.

SOC SIEM & SOAR
Monitor and investigate security alerts.
Support SIEM use-case tuning and optimization.
Execute incident response playbooks.
Assist with SOAR automation workflows.
Technologies: Microsoft Sentinel Cortex XSOAR Splunk SOAR Threat Intelligence.
Endpoint Security
Administer EDR/XDR platforms.
Monitor malware and ransomware events.
Support endpoint hardening activities.
Technologies: CrowdStrike Falcon SentinelOne Microsoft Defender for Endpoint.
Vulnerability & Patch Management
Execute vulnerability scans.
Analyze findings and coordinate remediation.
Track patch deployment status.
Support risk-based prioritization.
Technologies: Qualys VMDR Tenable Nessus Defender Vulnerability Management.
Network Security & Firewalls
Support firewall rule reviews and implementation.
Assist with network segmentation initiatives.
Troubleshoot connectivity and security issues.
Technologies: Palo Alto Networks Fortinet Cisco Firepower Check Point.
OT / ICS / SCADA Security
Support OT cybersecurity monitoring activities.
Participate in asset discovery and risk assessments.
Assist with securing SCADA ICS PLCs HMIs and engineering workstations.
Protocols: Modbus DNP3 OPC IEC 61850 PROFINET.
Nozomi Networks
Monitor OT assets and communications.
Support OT asset inventory activities.
Assist with threat detection and investigations using Nozomi Networks.
TXOne Networks
Support industrial endpoint protection.
Assist with application allowlisting and device control.
Support OT hardening and malware protection activities.
Purdue Model Knowledge
Working knowledge of Purdue Enterprise Reference Architecture:
Level 0 Physical Process
Level 1 Basic Control
Level 2 Supervisory Control
Level 3 Operations Management
Level 3.5 Industrial DMZ
Level 4 Enterprise IT
Level 5 External Networks / Cloud

Required Qualifications
Bachelors degree in Cybersecurity Information Technology Computer Science Engineering or related field.
35 years of cybersecurity experience.
Experience with security operations and enterprise security technologies.
Exposure to OT/ICS environments is desirable.

Frameworks & Standards
ISA/IEC 62443
NIST Cybersecurity Framework
NIST SP 800-82
MITRE ATT&CK for ICS
ISO 27001

Joining DXC connects you with brilliant people who embrace change and seize opportunities to advance their careers and amplify client success. At DXC we support each other and work as a team globally and locally. Our achievements demonstrate how we deliver excellence to our clients and colleagues. You will join a team committed to creating a culture of learning diversity and inclusion dedicated to strong ethics and corporate citizenship

At DXC Technology we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing productivity individual work styles and life circumstances. Were committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services such as false websites or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process nor ask a job seeker to purchase IT or other equipment on our information on employment scams is availablehere.