| Location | Cleveland, OH |
| Industry | Metals and Minerals |
| Salary | $115,000–$145,000 Per Year |
| Company Size | 10,000 employees or more |
| Year Founded | 1847 |
| Website | https://www.clevelandcliffs.com/about |
Location Cleveland OHCleveland-Cliffs is currently seeking a Senior Cybersecurity Engineer - Security Architecture & Automation to help strengthen and scale our cybersecurity program through security architecture incident response threat hunting and automation. Supporting one of North Americas largest steel producers this role focuses on designing resilient security solutions automating response capabilities and partnering across infrastructure operations OT and cybersecurity teams to protect critical business systems while enabling reliable production.Summary of ResponsibilitiesLead security architecture reviews of new systems applications cloudSaaS services third-party integrations and OTICS requests assuming initial access will happen and designing for segmentation least privilege zero-trust principles and resilient recovery that holds up under both attacks and ordinary failures then turn recurring patterns into engineering standards other teams and vendors design toDesign and build security automation including automated triage enrichment and response using SOAR scripting or AI-assisted workflows so detection and response keep pace with attackers who move in minutes. This is where most of your week livesRight-size recommendations to real business risk availability first working with the business to land on solutions that are repeatable and supportable and tie each one including how identities actually get compromised MFA bypass help deskvoice social engineering session and token theft and how attackers abuse integrations APIs and AI tools to the specific attack it stopsTake periodic turns in a mature shared on-call rotation across the cybersecurity team leading incident response and threat hunting when events occur and feed every incident back into architecture and automationPartner with our OT vulnerability managementGRC DevSecOps AI security and infrastructure teams including certificate management post-quantum cryptography readiness and architecture at the ITOT boundary and share what you learn to help others growScope and participate in penetration tests automated pen testing and purple-team exercises then turn what you learn and current threat intelligence into design and detection improvementsMinimum Qualifications5 years in cybersecurity including hands-on incident response and experience in threat hunting or detection engineeringExperience with SIEM-based detection and hands-on experience automating security work including scripting PythonPowerShell APIs SOAR or AI-assisted workflowsWorking knowledge of network security identity data protection endpoint remote access encryption cloud resilience redundancy failover recovery and vulnerability managementFamiliarity with penetration testing and purple-team methodology and frameworks such as MITRE ATT&CK NIST CSF or CIS ControlsClear communication with both technical and non-technical audiencesUnderstanding of the Purdue Model or IEC 62443 as OTICS security frameworks since youll be reviewing a steady stream of OT-related requestsBachelors degree in a related field or equivalent experienceMust be able to work full-time onsiteThe ability to work closely with infrastructure operations engineering and cybersecurity teams making in-person collaboration an important part of successApplicants must be legally authorized to work in the United StatesOther duties as assignedPreferred QualificationsExposure to identity IAM or PAM with room to grow into these areasHands-on exposure to PLCs or other OTICS field devicesIndustry certifications e.g. CISSP GIAC OSCP CySAundefinedThe salary range for this role is 115000 to 145000. An employees pay within the salary range will be based on numerous factors including but not limited to relevant education qualifications experience skills geographic location and business or organizational needs. Cleveland-Cliffs is a leading North America-based steel producer with focus on value-added sheet products particularly for the automotive industry. The Company is vertically integrated from the mining of iron ore production of pellets and direct reduced iron and processing of ferrous scrap through primary steelmaking and downstream finishing stamping tooling and tubing. We offer an excellent total compensation package including competitive pay with variable compensation opportunity health insurance retirement plan education assistance paid time off and more.Cleveland-Cliffs Inc. is committed to working with and providing reasonable accommodation to individuals with disabilities. If because of a medical condition or disability you need a reasonable accommodation for any part of the employment process please send an e-mail tocareersclevelandcliffs.comor call 1-312 899-3097 and let us know the nature of your request and your contact information. Do not email your application materials to this email address. Application materials sent to this email address will not be considered.Cleveland-Cliffs Inc. is an equal opportunity employer - MFVeteranDisability. We are a drug-free workplace and conduct pre-employment screening as a condition of employment.
Cleveland-Cliffs is the largest flat-rolled steel producer in North America. Founded in 1847 as a mine operator, we are also the largest supplier of iron ore pellets in North America. In 2020, we acquired two major steelmakers, AK Steel and ArcelorMittal USA, vertically integrating our legacy iron ore business with quality-focused steel production and emphasis on the automotive end market. Our fully integrated portfolio includes custom-made pellets and HBI; flat-rolled carbon steel, stainless, electrical, plate, tinplate and long steel products; as well as carbon and stainless steel tubing, hot and cold stamping and tooling. Headquartered in Cleveland, Ohio, we employ approximately 25,000 people across our mining, steel and downstream manufacturing operations in the United States and Canada.