• Support RMF lifecycle activities for assigned federal information systems, including categorization, control implementation, assessment, and continuous monitoring, under the guidance of senior team members • Assist in developing and updating system security documentation, including SSPs, Security Assessment Reports (SARs), and POA&Ms • Help track and document security control deviations and vulnerabilities through to closure • Support continuous monitoring activities, including log review and vulnerability scan analysis, alongside senior ISSOs • Assist in maintaining system inventory, hardware/software baselines, and interconnection agreements • Support incident response documentation, escalation tracking, and remediation follow-up • Participate in security reviews, audits, and inspections as part of the broader team • Coordinate with Information System Owners (ISOs) and other stakeholders on routine compliance tasks • Build working knowledge of federal directives including FISMA and OMB A-130 through applied, on-the-job training

• Own the Region • Build and execute the Nordics go-to-market strategy that drives new business and establishes Upwind as the security platform of choice. • Sell to the Top • Build trusted relationships with CISOs, CTOs, and Heads of Cloud - connecting Upwind's platform to real business outcomes. • Run Full-Cycle Enterprise Deals • Own complex sales cycles start to finish: qualify, evaluate, align stakeholders, close. • Win as a Team • Partner closely with Sales Engineering, Product, and Customer Success to deliver a seamless buying experience. • Expand the Ecosystem • Build relationships with channel partners and cloud providers to extend Upwind's reach across the region. • Forecast with Precision • Run a disciplined pipeline with accurate, data-driven forecasting.

• Driving the organization's certification expansion roadmap, maintaining continuous evidence readiness, and ensuring ongoing internal and external audit preparedness • Directing the end-to-end lifecycle of internal cybersecurity audits and compliance certifications • Developing and executing a multi-year certification roadmap while driving continuous readiness through proactive gap analyses, mock audits, and a centralized evidence repository • Leading enterprise risk assessments, maintaining a continuous risk register with clear mitigation timelines • Partnering cross-functionally with engineering, legal, IT, cybersecurity, and business leadership to embed audit readiness into daily operations • Optimizing GRC tooling to automate compliance processes and streamline evidence collection • Delivering executive-level compliance metrics and risk dashboards that track certification roadmap progress

Role Description Eaton’s Corporate Sector division is currently seeking an IT - Incident Response Engineer. The expected annual salary range for this role is $113,000 - $165,000 a year. This role can sit out of any US Eaton site; however, remote candidates will be considered. Identify, analyze, and respond to advanced cyber threats and incidents — across on-premises, hybrid, and multi-cloud environments — as a senior member of Eaton's Cyber Security Incident Response Team (CSIRT). Serve as a force-multiplier within the Prevent–Detect–Respond strategy, applying deep incident response and cloud security expertise while advancing the team's next-generation capabilities in agentic AI, automation, detection engineering, and insider threat program. Protect Eaton's intellectual property, operational technology, cloud workloads, and brand across a highly complex, global, multi-technology, regulated, and diversified business environment. This role requires hands-on response capabilities and the aptitude to elevate the broader team's technical maturity. Responsibilities - Responsible for the engineering, health, and continuous improvement of detection and response capabilities across cloud and on-premises estates. - Investigating, analyzing, containing, and remediating cyber threats and security incidents. - Building the automation and AI-enabled tooling that scales the Security Operations Center (SOC). What you'll do: - Provide 24/7/365 (on-call rotation) cyber security incident response. - Respond to, investigate, and resolve information security issues in accordance with compliance, regulatory, and investigative standards. - Manage and coordinate response to malicious cyber activity inside or targeting Eaton's assets. - Perform proactive threat hunting based on emerging indicators of compromise, vulnerabilities, and threat intelligence. - Lead detection, investigation, and response for cloud security incidents across major platforms (Microsoft Azure, AWS, and/or Google Cloud). - Develop and tune cloud-native detections using cloud logging and telemetry. - Apply knowledge of cloud identity and access management, misconfigurations, and cloud attack paths. - Partner with cloud platform and engineering teams to embed security into cloud architecture. - Track threat actors and campaigns relevant to Eaton's industry and geography. - Design, build, and enable agentic AI and automation workflows (SOAR, scripting, AI agents). - Develop and maintain automated playbooks that reduce mean time to detect and respond. - Contribute to securing Eaton's adoption of AI. - Conduct digital forensic analysis and eDiscovery in support of incident response. - Provide security engineering services, including deployment, configuration, management, and updating of the security tool stack. - Develop advanced queries, correlation rules, and detections to enhance the organization's detection coverage. - Contribute to SIEM architecture. Qualifications - Bachelor’s Degree from an accredited institution. - Minimum seven (7) years in security operations, incident response, cloud security, e-Discovery, insider threat, security engineering or related field. - This position requires use of information or access to hardware which may be subject to the International Traffic in Arms Regulations (ITAR). - Must be legally authorized to work in the United States without company sponsorship both now and in the future. Preferred Qualifications - Demonstrated hands-on experience leading or performing cyber security incident response. - Hands-on cloud security experience with one or more major platforms. - Experience correlating events from multiple sources. - Detection engineering experience and SIEM content development and architecture. - Experience building automation and/or agentic AI workflows. - Working knowledge of AI/LLM security concepts. - Emphasis on experience with digital forensics and eDiscovery tools. - Solid understanding of adversary TTPs and the MITRE ATT&CK framework. - Strong analytical and problem-solving skills. Skills - Exceptional communication skills. - Ability to translate complex technical findings into clear, business-relevant language. - Communicate incident status, risk, and impact with accuracy and transparency. - Produce clear, concise written deliverables. - Present confidently and credibly to senior leadership. - Strong project management, multitasking, and organizational skills. Benefits - Various Health and Welfare benefits. - Retirement benefits. - Programs that provide for paid and unpaid time away from work.