Cybersecurity Defense Analyst - Senior

We are looking for a talented Cybersecurity Defense Analyst
- Senior to join our team specializing in Systems/Information Technology for our Corporate organization in Columbus, IN.

• Protect Cummins' technology environment by applying cybersecurity policies, data privacy principles, and security best practices to reduce organizational risk.
• Lead cybersecurity risk assessments and identify potential vulnerabilities, ensuring effective mitigation strategies are developed and implemented.
• Serve as a trusted advisor to business and technology stakeholders by providing expert guidance on secure technology solutions and risk-informed decision‑making.
• Apply industry‑leading frameworks and standards such as NIST, ISO, ITIL, and COBIT to strengthen security controls and support regulatory compliance.
• Partner with cross‑functional teams to evaluate new and changing technology solutions, ensuring cybersecurity requirements are integrated from the start.
• Coach, mentor, and develop less experienced team members, helping build cybersecurity capabilities and fostering a culture of continuous learning.
• Build and maintain strong business relationships that enable collaboration, strengthen stakeholder trust, and deliver measurable business value.
• Drive proactive cybersecurity improvements by balancing business objectives with security requirements, helping the organization remain resilient against evolving threats.
• Support and execute adversary emulation, purple team, and security validation activities across enterprise environments.
• Operate and maintain Breach and Attack Simulation (BAS) and adversary emulation platforms to validate defensive controls and identify detection gaps.
• Conduct security testing of cloud, hybrid, and on‑premises environments to identify exploitable weaknesses and security control deficiencies.
• Partner with Threat Intelligence and Threat Hunting teams to emulate relevant attacker behaviors, techniques, and procedures.
• Assist in developing repeatable attack scenarios aligned to MITRE ATT&CK techniques and organizational threat priorities.
• Validate detection and response capabilities by coordinating with defensive security teams during purple team exercises.
• Help automate offensive testing workflows, validation processes, and operational reporting through scripting and tooling enhancements.
• Document findings, attack paths, detection gaps, and remediation recommendations in a clear and actionable manner.
• Contribute to the continuous improvement of proactive security validation capabilities, processes, and operational maturity.
• Support offensive cyber operations initiatives including targeted assessments, adversary simulation activities, and security research efforts.
• Support the engineering and development of remedial workflows for findings generated by adversarial and offensive activities.

• Action oriented – taking on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
• Balances stakeholders – anticipating and balancing the needs of multiple stakeholders.
• Business insight – applying knowledge of business and the marketplace to advance the organization’s goals.
• Ensures accountability – holding self and others accountable to meet commitments.
• Manages complexity – making sense of complex, high‑quantity, and sometimes contradictory information to effectively solve problems.
• Organizational savvy – maneuvering comfortably through complex policy, process, and people‑related organizational dynamics.
• Persuades – using compelling arguments to gain the support and commitment of others.
• Resourcefulness – securing and deploying resources effectively and efficiently.
• Tech savvy – anticipating and adopting innovations in business‑building digital and technology applications.
• Training delivery – instructs learners in a manner that engages and adjusts to individual and group needs, resulting in knowledge, skills and abilities that can be applied on the job.
• Cybersecurity risk management – identifying and assessing the potential impact of cybersecurity risks against established industry frameworks, regulations, and organizational policies to…