"Alerted.org

**Requisition ID:** 289933

+ **Relocation Authorized:** None

+ **Telework Type:** Full-Time Telework

+ **Work Location:** Glendale, AZ

+ **Salary Range:** $69,900 - $118,920 annually (Determined by function, education, experience, and qualifications of the applicant.)

# Extraordinary teams building inspiring projects:

Since 1898, we have helped customers complete more than 25,000 projects in 160 countries on all seven continents that have created jobs, grown economies, improved the resiliency of the world's infrastructure, increased access to energy, resources, and vital services, and made the world a safer, cleaner place.

Differentiated by the quality of our people and our relentless drive to deliver the most successful outcomes, we align our capabilities to our customers' objectives to create a lasting positive impact. We serve the Infrastructure; Nuclear, Security & Environmental; Energy; Mining & Metals, and the Manufacturing and Technology markets. Our services span from initial planning and investment, through start-up and operations.

Core to Bechtel is our Vision, Values and Commitments . They are what we believe, what customers can expect, and how we deliver. Learn more about our extraordinary teams building inspiring projects in our Impact Report .

# Job Summary:

As a member of an incident response team, you will defend Bechtel's network against cyberthreats, counteracting network security issues and apply computer science methodologies to perform root cause analysis to mitigate threats and vulnerabilities. In this role, you will recognize and respond to potential security issues and report incidents to supervision. You will assist with monitoring, testing, and troubleshooting hardware and software cyber security problems, applying security controls, implementing safeguards, and performing audits. By proactively addressing issues, you will contribute to the resilience and security of the organization. As a member of an incident response team, you will defend Bechtel's network against cyberthreats, counteracting network security issues and apply computer science methodologies to perform root cause analysis to mitigate threats and vulnerabilities. In this role, you will recognize and respond to potential security issues and report incidents to supervision. You will assist with monitoring, testing, and troubleshooting hardware and software cyber security problems, applying security controls, implementing safeguards, and performing audits. By proactively addressing issues, you will contribute to the resilience and security of the organization.

This role operates in a tierless SOC, where analysts are expected to own the full ticket lifecycle, from triage through investigation, containment, and resolution.

# Shift Work

Must be willing to work in a 24x7x365 Security Operations Center environment, as well as expected to work weekends, holidays, and allow for flexible scheduling. This role may be performed remotely within the U.S.

Shift times and schedules are subject to change in response to SOC priorities and coverage needs. Potentially, the work hours for this position will be overnight 10:00 pm - 8:30 am, which does qualify for night differential salary increase (10%).

# Major Responsibilities:

Level 1

+ **Performs initial alert triage** following SOC playbooks (EDR, SIEM, email security, web proxy, identity platforms, etc.).

+ **Recognizes potential security issues** , collects supporting evidence, documents findings, and escalates according to SOC procedures.

+ **Assures all work processes are properly tracked** in case management systems to support cybersecurity programs and audit requirements.

+ **Supports monitoring and basic troubleshooting** of cybersecurity tools and systems under SOC purview.

+ **Assists in applying security controls** and reports on their effectiveness as directed by senior analysts and SOC leadership.

+ **Helps implement and monitor cybersecurity safeguards** following standard operating procedures and guidance from senior team members.

+ **Participates in incident response activities** , including evidence gathering, log review, and incident documentation.

+ **Works closely with senior analysts** to develop investigation skills, understand root cause analysis, and improve technical depth.

+ **Maintains situational awareness of SOC alerts and ongoing incidents** , escalating any anomalies or deviations.

Level 2

+ **Performs advanced investigations** and leads incident response activities through containment, remediation, and recovery.

+ **Assists with system audits** to evaluate security posture, detect vulnerabilities or misconfigurations, and recommend corrective actions.

+ **Develops and maintains cybersecurity documentation** , including investigation reports, SOPs, playbooks, and authorization artifacts for systems under purview.

+ **Proactively hunts for indicators of compromise** , anomalous patterns, or advanced threats across multiple data sources.

+ **Analyzes and tunes detection logic** (SIEM rules, EDR policies, alerting workflows) to reduce false positives and enhance coverage.

+ **Provides mentorship and guidance** to Level 1 analysts on triage quality, escalation criteria, indicators of attack/compromise, and case documentation.

+ **Coordinates with security engineering teams** on tool enhancements, automation improvements, and control optimizations.

+ **Supports incident post-mortems and root cause analysis** , producing actionable insights to improve SOC processes.

# Education and Experience Requirements:

Level 1

+ Typically requires a University Hire with 1-2 years of experience or 5-6 years of relevant work experience​​.

+ Must be a US Citizen.

Level 2

+ Typically requires a University Hire with 2-5 years of experience or 6-9 years of relevant work experience​​.

+ Must be a US citizen.

# Required Knowledge and Skills:

+ Level 1

+ Entry-level position within field.​

+ Learning to use professional concepts.​

+ Applies company policies & procedures to resolve routine issues.Level 2

+ Career development position within field​.

+ Continues to learn and apply professional concepts.​

+ Applies company policies & procedures to resolve mostly routine issues.​​

# Total Rewards/Benefits:

For decades, Bechtel has worked to inspire the next generation of employees and beyond! Because our teams face some of the world's toughest challenges, we offer robust benefits to ensure our people thrive. Whether it is advancing careers, delivering programs to enhance our culture, or providing time to recharge, Bechtel has the benefits to build a legacy of sustainable growth. Learn more at Bechtel Total Rewards

# Diverse teams build the extraordinary:

As a global company, Bechtel has long been home to a vibrant multitude of nationalities, cultures, ethnicities, and life experiences. This diversity has made us a more trusted partner, more effective problem solvers and innovators, and a more attractive destination for leading talent.

We are committed to being a company where every colleague feels that they belong-where colleagues feel part of "One Team," respected and rewarded for what they bring, supported in pursuing their goals, invested in our values and purpose, and treated equitably. Click here to learn more about the people who power our legacy.

_At Bechtel, our employees enjoy a competitive total rewards package that includes comprehensive medical, dental, and vision plans, along with optional disability and supplemental insurance options, generous paid time off (160 hours annually, accrued 6.16 hours per pay period), nine paid holidays, paid parental leave, discretionary bonuses, and a well-designed 401K plan with matching and profit-sharing components_

_Bechtel is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, disability, citizenship status (except as authorized by law), protected veteran status, genetic information, and any other characteristic protected by federal, state or local law. Applicants with a disability, who require a reasonable accommodation for any part of the application or hiring process, may e-mail their request to_** **[email protected]