Build your best future with the Johnson Controls team
As a global leader in smart, healthy and sustainable buildings, our mission is to reimagine the performance of buildings to serve people, places and the planet. Join a winning team that enables you to build your best future! Our teams are uniquely positioned to support a multitude of industries across the globe. You will have the opportunity to develop yourself through meaningful work projects and learning opportunities. We strive to provide our employees with an experience, focused on supporting their physical, financial, and emotional wellbeing. Become a member of the Johnson Controls family and thrive in an empowering company culture where your voice and ideas will be heard – your next great opportunity is just a few clicks away!
What you will do:
- Investigate and respond to security alerts and incidents, performing root cause analysis and driving corrective actions.
- Lead and support incident response efforts, coordinating across teams to contain and remediate threats.
- Continuously improve detection and response processes through automation, runbook development, and SOP creation.
- Identify and strengthen threat detection and prevention capabilities.
- Integrate threat intelligence into operational workflows to proactively address emerging threats.
- Collaborate with Security, IT, and Business teams to enhance readiness and resilience through joint response planning.
What You’ll Need to Succeed
- Extensive experience in Security Operations and Incident Response, with a strong track record of handling complex incidents.
- Proficiency with modern cybersecurity tools (EDR, SIEM, firewalls, WAF, identity, and cloud security platforms).
- Experience operationalizing threat intelligence and developing detection strategies for evolving threats.
- Strong analytical and problem-solving skills, with a focus on process rigor and continuous improvement.
- Ability to drive action and influence outcomes in fast-paced, cross-functional environments.
- Excellent communication and collaboration skills, with a team-first mindset and mentoring capabilities.
What we look for:
Required
- 1–3 years in a SOC, incident response, IT security operations, or adjacent role (e.g., EDR admin, blue team intern/co-op).
- Experience with at least one of: SIEM, EDR/XDR, secure email gateway, cloud security tools (M365 Defender suite, Defender for Endpoint, Sentinel, Splunk, CrowdStrike, Palo Alto, Zscaler, etc.).
- Familiarity with core investigation concepts: event correlation, user/host baselining, MITRE ATT&CK, common malware/TTPs, phishing indicators.
- Strong communication skills—able to explain technical issues to non-technical users and document clearly and concisely.
- Understanding of basic networking (TCP/IP, DNS, HTTP, VPN) and Windows/Linux fundamentals (processes, services, logs, registry, authentication).
- Ability to work in a ticket-driven environment with SLAs and handoffs to an MSSP.
- Inquisitive personality that lends itself to question asking and research
Preferred
- Exposure to manufacturing/OT environments (ICS/SCADA basics, Purdue model, segmentation concepts, remote access risks).
- Experience with SOAR workflows and playbooks; basic scripting (PowerShell, Python, KQL) for triage automation.
- Knowledge of identity security (AAD, MFA, conditional access), email security, and cloud log sources.
- Certifications: Security+, CySA+, Microsoft SC‑200, GSEC, or equivalent
Skills Required
- 1-3 years of experience in a SOC, incident response, IT security operations, or an adjacent role
- Experience with at least one SIEM, EDR/XDR, secure email gateway, or cloud security tool
- Familiarity with event correlation, user and host baselining, MITRE ATT&CK, common malware and TTPs, and phishing indicators
- Strong communication skills and ability to explain technical issues to non-technical users
- Understanding of TCP/IP, DNS, HTTP, VPN, Windows fundamentals, and Linux fundamentals
- Ability to work in a ticket-driven environment with SLAs and MSSP handoffs
- Inquisitive personality with strong question-asking and research abilities
- Exposure to manufacturing or OT environments, including ICS/SCADA, Purdue model, segmentation, and remote access risks
- Experience with SOAR workflows and playbooks
- Basic scripting experience with PowerShell, Python, or KQL
- Knowledge of identity security, email security, and cloud log sources
- Security+, CySA+, Microsoft SC-200, GSEC, or equivalent certification
Johnson Controls Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Johnson Controls and has not been reviewed or approved by Johnson Controls.
-
Retirement Support — Retirement support is positioned as a meaningful part of the package through employer 401(k) matching, repeatedly framed as a strong pillar of the overall rewards mix. The matching contribution is described with specific match levels in multiple places, reinforcing perceived value for long-term saving.
-
Leave & Time Off Breadth — Time off is presented as comparatively robust, with multiple paid holiday categories, vacation time, and sick time described as generous or “amazing” in places. Paid time off breadth appears to be a consistent contributor to total rewards attractiveness beyond base pay.
-
Flexible Benefits — Benefits are described as broad and customizable, spanning standard medical/dental/vision plus optional add-ons like pet insurance, identity protection, and legal support. Tuition reimbursement is repeatedly highlighted as a high-value option supporting professional development.
Johnson Controls Insights
What We Do
At Johnson Controls, we transform the environments where people live, work, learn and play. From optimizing building performance to improving safety and enhancing comfort, we drive the outcomes that matter most. Dedicated to protecting the environment, we deliver our promise in industries such as healthcare, education, data centers and manufacturing. With a global team of 100,000 experts in more than 150 countries and over 130 years of innovation, we are the power behind our customers’ mission. Our leading portfolio of building technology and solutions includes some of the most trusted names in the industry, such as Tyco®, York®, Metasys®, Ruskin®, Titus®, Frick®, Penn®, Sabroe®, Simplex®, Ansul® and Grinnell®.
