Security Operations Analyst at Sungrow

Job description

Security Operations Analyst About Sungrow: Sungrow Power Supply Co., Ltd. (“Sungrow”) is a global leading PV inverter and ESS provider with 515 GW of power electronic converters installed worldwide as of  December 2023. Founded in 1997 by University Professor Cao Renxian, Sungrow leaders in the research and development of solar inverters with the largest dedicated R&D team in the industry and a broad product portfolio offering PV inverter solutions and ESS for utility-scale, commercial & industrial, and residential applications, as well as internationally recognized floating PV plant solutions, NEV driving solutions, EV charging solutions, and renewable hydrogen production systems. With a strong 27-year track record in the PV space, Sungrow products power in 170 countries and regions worldwide. For more information about Sungrow, visit: www.sungrowpower.com . The Position: We are seeking a Security Operations Engineer to join Sungrow Americas’ cybersecurity team. This role is responsible for owning and operating security technologies, leading incident response activities, and strengthening detection and response capabilities across IT and cloud environments. This position operates beyond traditional SOC analyst responsibilities, combining hands-on engineering, tool ownership, and full lifecycle incident response. The Security Operations Engineer will serve as a key technical resource supporting Sungrow’s defense-in-depth strategy and overall security maturity. Security Tooling & Platform Ownership • Lead Initial deployment, configuration, and ongoing management of security platforms, including SIEM, EDR/XDR, IAM, vulnerability management, and related tooling • Lead integration and optimization of security technologies across enterprise IT, AWS, and Azure environments • Continuously improve detection capabilities through alert tuning, correlation rules, and automation Detection & Incident Response • Execute end-to-end incident response, including triage, investigation, containment, remediation, and post-incident analysis • Serve as a technical escalation point for security incidents and operational issues • Partner with Sungrow’s MSSP to ensure effective monitoring, escalation, and response coordination Cloud & Infrastructure Security • Own and execute security hardening and configuration management • Identify and remediate security gaps, misconfigurations, and control deficiencies • Collaborate with IT and engineering teams to implement and maintain secure configurations Vulnerability & Risk Management • Partner on vulnerability management processes, including scanning, prioritization, and remediation tracking • Align remediation efforts with risk impact and operational priorities • Support audit and compliance activities through technical control validation and evidence generation Cross-Functional Collaboration & Continuous Improvement • Work across IT, engineering, and external partners to drive security improvements • Support and update playbooks, procedures, and operational documentation • Contribute to security design decisions and architecture improvements across tooling and cloud environments Requirements • 2-4 years of hands-on experience in cybersecurity operations or analyst roles • Demonstrated experience supporting and working within security tools (SIEM, EDR/XDR, IAM, vulnerability management) • Hands-on experience supporting cloud environments (AWS and/or Azure) • Proven ability to investigate and respond to security incidents • Understanding of security operations workflows, detection, and response processes • Ability to work across technical domains, including endpoint, identity, cloud, and network security Preferred • Familiarity with ISO 27001, NIST CSF, SOC 2, or NERC CIP frameworks • Experience working in hybrid IT/OT or global enterprise environments • Relevant certifications (Security+, CySA+, GCIH, or equivalent) Competencies • Strong technical ownership mindset with the ability to operate independently • Effective communicator across technical and non-technical stakeholders • Proactive problem-solving with attention to detail • Ability to manage multiple priorities in a fast-paced environment • Commitment to continuous improvement and skill development Travel Up to 10% Work Location and Status: • FTE, Hybrid, Costa Mesa, California / Houston, Texas • No visa sponsorship Compensation: Competitive compensation aligned with experience, scope of responsibility, and market benchmarks. Sungrow is an equal opportunity employer. Due to strong interests in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

Requirements

Must-haves

Security Operations Analyst
Security Tooling & Platform Ownership
Lead Initial deployment, configuration, and ongoing management of security platforms, including SIEM, EDR/XDR, IAM, vulnerability management, and related tooling
Lead integration and optimization of security technologies across enterprise IT, AWS, and Azure environments
Continuously improve detection capabilities through alert tuning, correlation rules, and automation
Detection & Incident Response
Execute end-to-end incident response, including triage, investigation, containment, remediation, and post-incident analysis
Serve as a technical escalation point for security incidents and operational issues
Partner with Sungrow’s MSSP to ensure effective monitoring, escalation, and response coordination
Cloud & Infrastructure Security
Own and execute security hardening and configuration management
Identify and remediate security gaps, misconfigurations, and control deficiencies
Collaborate with IT and engineering teams to implement and maintain secure configurations
Vulnerability & Risk Management
Partner on vulnerability management processes, including scanning, prioritization, and remediation tracking

Nice-to-haves

Familiarity with ISO 27001, NIST CSF, SOC 2, or NERC CIP frameworks
Experience working in hybrid IT/OT or global enterprise environments
Relevant certifications (Security+, CySA+, GCIH, or equivalent)
Competencies
Strong technical ownership mindset with the ability to operate independently
Effective communicator across technical and non-technical stakeholders
Proactive problem-solving with attention to detail
Ability to manage multiple priorities in a fast-paced environment
Commitment to continuous improvement and skill development

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazure

Platform: adp-workforce-now
Effort: medium