Security Analyst

Johnson Controls a global leader in thermal management mission-critical building systems energy efficiency and decarbonization helps customers use energy more productively reduce carbon emissions and operate with the precision and resilience required in rapidly expanding industries such as data centers healthcare pharmaceuticals advanced manufacturing and higher education.

For more than 140 years Johnson Controls has delivered performance where it really matters. Backed by advanced technology lifecycleservicesand an industry-leading field organization we elevate customer performance turn goals into real-worldresultsand help move society forward.

What we offer:

• Competitive salary
• Paidvacation/holidays/sicktime
• Comprehensive benefits package including 401K medical dental and vision care
• On the job/cross training opportunities
• Encouraging and collaborative team environment
• Dedication to safety through our Zero Harm policy

What you will do:

• Investigate and respond to security alerts and incidents performing root cause analysis and driving corrective actions.
• Lead and support incident response efforts coordinating across teams to contain and remediate threats.
• Continuously improve detection and response processes through automation runbook development and SOP creation.
• Identify and strengthen threat detection and prevention capabilities.
• Integrate threat intelligence into operational workflows to proactively address emerging threats.
• Collaborate with Security IT and Business teams to enhance readiness and resilience through joint response planning.

What Youll Need to Succeed

• Extensive experience in Security Operations and Incident Response with a strong track record of handling complex incidents.
• Proficiency with modern cybersecurity tools (EDR SIEM firewalls WAF identity and cloud security platforms).
• Experience operationalizing threat intelligence and developing detection strategies for evolving threats.
• Strong analytical and problem-solving skills with a focus on process rigor and continuous improvement.
• Ability to drive action and influence outcomes in fast-paced cross-functional environments.
• Excellent communication and collaboration skills with a team-first mindset and mentoring capabilities.

What we look for:
Required

• 15 years in a SOC incident response IT security operations or adjacent role (e.g. EDR admin blue team intern/co-op).
• Experience with at least one of: SIEM EDR/XDR secure email gateway cloud security tools (M365 Defender suite Defender for Endpoint Sentinel Splunk CrowdStrike Palo Alto Zscaler etc.).
• Familiarity with core investigation concepts: event correlation user/host baselining MITRE ATT&CK common malware/TTPs phishing indicators.
• Strong communication skillsable to explain technical issues to non-technical users and document clearly and concisely.
• Understanding of basic networking (TCP/IP DNS HTTP VPN) and Windows/Linux fundamentals (processes services logs registry authentication).
• Ability to work in a ticket-driven environment with SLAs and handoffs to an MSSP.
• Inquisitive personality that lends itself to question asking and research

Preferred

• Exposure to manufacturing/OT environments (ICS/SCADA basics Purdue model segmentation concepts remote access risks).
• Experience enriching investigations with OSINT Tools (VirusTotal Shodan Censys CyberChef etc.)
• Experience with SOAR workflows and playbooks; basic scripting (PowerShell Python KQL) for triage automation.
• Knowledge of identity security (AAD MFA conditional access) email security and cloud log sources.
• Certifications: Security CySA Microsoft SC200 GSEC or equivalent.

HIRING SALARY RANGE: $ USD (Salary to be determined by the education experienceknowledge skills and abilities of the applicant internal equity and alignment with marketdata.) All hiring decisions are ultimately made by human reviewers. For details pleasevisit the About Us tab on the Johnson Controls Careers site athttps:// Controls International plc. is an equal employment opportunity and affirmative action employer and all qualified applicants will receive consideration for employment without regard to race color religion sex national origin age protected veteran status genetic information sexual orientation gender identity status as a qualified individual with a disability or any other characteristic protected by law. To view more information about your equal opportunity and non-discrimination rights as a candidate visit EEO is the Law. If you are an individual with a disability and you require an accommodation during the application process please visit here.