Eaton’s Corporate Sector division is currently seeking a IT - Incident Response Engineer. The expected annual salary range for this role is $113000 - $165000 a year. This role can sit out of our Beachwood, OH or Moon Township, PA location.
Please note the salary information shown above is a general guideline only. Salaries are based upon candidate skills, experience, and qualifications, as well as market and business considerations.
Identify, analyze, and respond to advanced cyber threats and incidents — across on-premises, hybrid, and multi-cloud environments — as a senior member of Eaton's Cyber Security Incident Response Team (CSIRT). Serve as a force-multiplier within the Prevent–Detect–Respond strategy, applying deep incident response and cloud security expertise while advancing the team's next-generation capabilities in agentic AI, automation, detection engineering, and insider threat program. Protect Eaton's intellectual property, operational technology, cloud workloads, and brand across a highly complex, global, multi-technology, regulated, and diversified business environment. This role requires hands-on response capabilities and the aptitude to elevate the broader team's technical maturity.
Job responsibilities
Responsible for the engineering, health, and continuous improvement of detection and response capabilities across cloud and on-premises estates — investigating, analyzing, containing, and remediating cyber threats and security incidents that could impact the organization, while building the automation and AI-enabled tooling that scales the Security Operations Center (SOC)
Incident Response & Threat Hunting
• Provide 24/7/365 (on-call rotation) cyber security incident response, with a focus on responding to, containing, remediating, and recovering from cyber incidents across the global enterprise, including cloud-native and hybrid environments
• Respond to, investigate, and resolve information security issues in accordance with compliance, regulatory, and investigative standards
• Manage and coordinate response to malicious cyber activity inside or targeting Eaton's assets, including IT, cloud, and operational technology (OT) environments
• Perform proactive threat hunting based on emerging indicators of compromise, vulnerabilities, and threat intelligence
• Lead detection, investigation, and response for cloud security incidents across major platforms (Microsoft Azure, AWS, and/or Google Cloud), including identity, workload, container, and SaaS compromise scenarios
• Develop and tune cloud-native detections using cloud logging and telemetry
• Apply knowledge of cloud identity and access management, misconfigurations, and cloud attack paths to strengthen detection coverage and reduce exposure
• Partner with cloud platform and engineering teams to embed security into cloud architecture and support Cloud Security Posture Management (CSPM) and workload protection initiatives
• Track threat actors and campaigns relevant to Eaton's industry and geography; enrich incidents with contextual intelligence to drive faster, higher-confidence decisions
• Design, build, and enable agentic AI and automation workflows (SOAR, scripting, AI agents) to accelerate triage, investigation, containment, and reporting across cloud and on-premises estates
• Develop and maintain automated playbooks that reduce mean time to detect and respond and eliminate repetitive manual effort
• Contribute to securing Eaton's adoption of AI — assessing AI/LLM systems and agents for security risk, and supporting evaluation of AI-enabled SOC and managed services capabilities
• Conduct digital forensic analysis and eDiscovery in support of incident response, internal investigations, and legal/compliance requests, preserving evidence to investigative and chain-of-custody standards across endpoint and cloud sources
• Provide security engineering services, including deployment, configuration, management, and updating of the security tool stack across cloud and on-premises
• Develop advanced queries, correlation rules, and detections to enhance the organization's detection coverage and security posture
• Contribute to SIEM architecture — including cloud log onboarding, normalization, content lifecycle, and tuning to focus detection operations and reduce false positives
Basic (required) Qualifications:
• Bachelor’s Degree from an accredited institution
• Minimum seven (7) years in security operations, incident response, cloud security, e-Discovery, insider threat, security engineering or related field
• No relocation assistance is offered for this position. Only candidates currently residing within a 50-mile radius of the work location Beacheood, OH or Moon Township, PA will be considered. Active-Duty Military are exempt from this geographical limitation.
• This position requires use of information or access to hardware which may be subject to the International Traffic in Arms Regulations (ITAR). All applicants must be U.S. persons within the meaning of ITAR. ITAR defines a U.S. person as a U.S. Citizen, U.S. Permanent Resident (i.e. 'Green Card Holder'), Political Asylee, or Refugee.
• Must be legally authorized to work in the United States without company sponsorship both now and in the future
Preferred Qualifications:
• Demonstrated hands-on experience leading or performing cyber security incident response, including containment, remediation, and recovery
• Hands-on cloud security experience with one or more major platforms
• Experience correlating events from multiple sources — including cloud-native sources — to detect suspicious and/or malicious activity
• Detection engineering experience and SIEM content development and architecture
• Experience building automation and/or agentic AI workflows (SOAR, scripting in Python/PowerShell, AI agents) to streamline security operations
• Working knowledge of AI/LLM security concepts and the risks associated with enterprise AI adoption
• Emphasis on experience with digital forensics and eDiscovery tools and methodologies
• Solid understanding of adversary TTPs and the MITRE ATT&CK framework
• Capacity to comprehend complex technical infrastructure, managed services, and third-party dependencies
• Strong analytical and problem-solving skills
Soft skills
Exceptional communication skills are essential for this role. The analyst must communicate clearly, articulately, and with transparency across all levels of the organization — from technical peers and junior analysts to senior leadership and executives. This includes:
• Translating complex technical findings into clear, business-relevant language for executive and non-technical audiences
• Communicating incident status, risk, and impact with accuracy and transparency, especially under pressure during active incidents
• Producing clear, concise written deliverables — incident reports, executive briefings, and documentation — that withstand scrutiny
• Presenting confidently and credibly to senior leadership, and fostering open, honest communication that builds trust across the team and stakeholders
• Excellent proficiency in English (written and verbal)
• Strong analytical and problem-solving skills
• Proven ability to mentor and upskill junior analysts
• Strong project management, multitasking, and organizational skills
All positions may require participation in video and in-person interviews as part of the hiring process. All candidates will be evaluated based on job-related competencies, and all candidates’ privacy rights and data security will be protected in accordance with applicable laws.
We are committed to ensuring equal employment opportunities for all job applicants and employees. Employment decisions are based upon job-related reasons regardless of an applicant's race, color, religion, sex, sexual orientation, gender identity, age, national origin, disability, marital status, genetic information, protected veteran status, or any other status protected by law.
Eaton believes in second chance employment. Qualified applicants with arrest or conviction history will be considered regardless of their arrest or conviction history, consistent with the Los Angeles County Fair Chance Ordinance, the California Fair Chance Act and other local laws.
You do not need to disclose your conviction history or participate in a background check until a conditional job offer is made to you. After making a conditional offer and running a background check, if Eaton is concerned about conviction that is directly related to the job, you will be given the chance to explain the circumstances surrounding the conviction, provide mitigating evidence, or challenge the accuracy of the background report.
To request a disability-related reasonable accommodation to assist you in your job search, application, or interview process, please call us at 1-800-836-6345 to discuss your specific need. Only accommodation requests will be accepted by this phone number.
We know that good benefit programs are important to employees and their families. Eaton provides various Health and Welfare benefits as well as Retirement benefits, and several programs that provide for paid and unpaid time away from work. Click here for more detail: Eaton Benefits Overview. Please note that specific programs and options available to an employee may depend on eligibility factors such as geographic location, date of hire, and the applicability of collective bargaining agreements.
Skills Required
- Bachelor's degree from an accredited institution
- At least seven years of experience in security operations, incident response, cloud security, eDiscovery, insider threat, security engineering, or a related field
- Reside within 50 miles of Beachwood, Ohio, or Moon Township, Pennsylvania; active-duty military are exempt
- Be a U.S. person under ITAR requirements, including U.S. citizen, permanent resident, asylee, or refugee
- Be legally authorized to work in the United States without company sponsorship now or in the future
- Hands-on experience leading or performing cybersecurity incident response, including containment, remediation, and recovery
- Hands-on cloud security experience with one or more major cloud platforms
- Experience correlating events from multiple sources, including cloud-native sources, to detect suspicious or malicious activity
- Detection engineering experience and SIEM content development and architecture
- Experience building automation or agentic AI workflows using SOAR, scripting, or AI agents
- Working knowledge of AI and LLM security concepts and enterprise AI risks
- Experience with digital forensics and eDiscovery tools and methodologies
- Understanding of adversary tactics, techniques, procedures, and the MITRE ATT&CK framework
- Ability to understand complex technical infrastructure, managed services, and third-party dependencies
- Strong analytical and problem-solving skills
- Exceptional written and verbal communication skills in English
- Ability to mentor and upskill junior analysts
- Strong project management, multitasking, and organizational skills
Eaton Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Eaton and has not been reviewed or approved by Eaton.
-
Healthcare Strength — Health coverage is described as comprehensive, spanning medical, dental, vision, prescription, life, and company‑paid disability, with HSAs/HRAs and wellness programs enhancing access and support.
-
Retirement Support — Retirement offerings include a 401(k) with company matching alongside additional retirement contributions, with some sites also featuring pension and profit‑sharing components.
-
Parental & Family Support — Paid parental leave for all parents, childbirth leave via short‑term disability for birth mothers, adoption benefits, and subsidized backup care signal strong family‑focused support.
Eaton Insights
What We Do
Planes. Hospitals. Factories. Data centers. Vehicles. The electrical grid. These are things people depend on every day. And the companies behind them depend on Eaton to solve some of the toughest power management challenges on the planet. Eaton’s mission is to improve the quality of life and the environment through the use of power management technologies and services. We provide sustainable solutions that help our customers effectively manage electrical, hydraulic, and mechanical power – more safely, more efficiently, and more reliably. Eaton’s 2020 revenues were $17.9 billion, and we sell products to customers in more than 175 countries. We have approximately 92,000 employees.
Why Work With Us
At Eaton, we make what matters work—creating exciting new power management technologies that keep the world moving every day. We create an environment where creativity, invention and discovery become reality every day. It’s where bold, bright professionals can reach their full potential—and where they help us reach ours.
Gallery
