Cyber Security Incident Responder at KUKA

Job description

Where do people love what they do, and being great at what they do? At Swisslog, that’s where! Our teams are the heart of a world-leading Robotics company that’s harnessing the power of technology to shape the future of intralogistics. The result? We’re transforming performance and efficiency for customers across the globe, giving them the vital edge in their markets. Make an impact The Cyber Security Incident Responder is responsible for monitoring, investigating, triaging, and responding to cybersecurity incidents across the enterprise within established operating procedures. The role involves analyzing security alerts, conducting investigations, coordinating containment and remediation activities, and continuously improving detection capabilities. The successful candidate will work closely with global IT and security teams to reduce cyber risk and strengthen the organization's security posture. • Perform daily security monitoring, incident triage, investigation, containment, and response activities in accordance with established SOC procedures and service level agreements (SLAs). • Monitor, investigate, and respond to security alerts using Microsoft Sentinel, Microsoft Defender XDR, and other security technologies. • Ability to identify issues, compromised computers using logs, and related computer-centric evidence sources • Document investigations, findings, and remediation actions accurately within case management systems. • Contribute to security use-case tuning and continuous detection improvement. Support automation initiatives through SOAR playbooks and workflow optimization. • Demonstrate ability to perform event analysis and tools utilization (identification, response, escalation) • Exercise attention to detail and due care in regards to work-related communication and documentation. • Exhibit willingness to learn, a desire to collaborate with others, and the drive to take on additional responsibilities when called upon. • Pursue job-related growth and knowledge via higher education, certification, and training. • Maintain awareness of changing processes, procedures, and standards critical to job performance. What you need to succeed • IT Experience Or Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience. • Knowledge of windows OS / General IT (Debugging and IT Problem solving) • Knowledge of phishing, malware, ransomware, account compromise, and insider-threat investigations is a plus • Basic understanding of SOAR technology is a plus • Experience working in a 24x7 SOC or shift-based operational environment is an advantage. • Understanding of common network services (Web, mail, DNS, authentication) is a plus • Previous hands-on experience in the field of IT security (Threat prevention, SIEM, Endpoint protection) is a plus • Experience with scripting or automation using PowerShell, Python, or similar technologies is an advantage. Our promise to you Swisslog is a world of opportunity for people who can deliver a game changing mission: driving the future of intralogistics, by shaping an era of robotic and data-driven automated solutions that create exceptional customer value. Join us on this journey and you’ll be part of a global enterprise that’s proud of its Swiss roots - and hugely excited by the worldwide opportunities open to everyone in the Swisslog family. So come and realize your potential, in a team that’s united by passion and driven by the OneSwisslog team spirit. Join the journey! We´re looking forward to receiving your application! Talent Acquisition Manager: Mai Gamble Note for United States job postings (EEO statement): Swisslog is an Equal Opportunity Employer committed to building an inclusive and diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity, disability status, protected veteran status, or any other factor protected by applicable federal, state or local laws.

Requirements

Must-haves

Where do people love what they do, and being great at what they do?
Make an impact
Perform daily security monitoring, incident triage, investigation, containment, and response activities in accordance with established SOC procedures and service level agreements (SLAs).
Monitor, investigate, and respond to security alerts using Microsoft Sentinel, Microsoft Defender XDR, and other security technologies.
Ability to identify issues, compromised computers using logs, and related computer-centric evidence sources
Document investigations, findings, and remediation actions accurately within case management systems.
Contribute to security use-case tuning and continuous detection improvement. Support automation initiatives through SOAR playbooks and workflow optimization.
Demonstrate ability to perform event analysis and tools utilization (identification, response, escalation)
Exercise attention to detail and due care in regards to work-related communication and documentation.
Exhibit willingness to learn, a desire to collaborate with others, and the drive to take on additional responsibilities when called upon.
Pursue job-related growth and knowledge via higher education, certification, and training.
Maintain awareness of changing processes, procedures, and standards critical to job performance.
What you need to succeed
IT Experience Or Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience.
Knowledge of windows OS / General IT (Debugging and IT Problem solving)
Experience working in a 24x7 SOC or shift-based operational environment is an advantage.
Experience with scripting or automation using PowerShell, Python, or similar technologies is an advantage.
Our promise to you
Join the journey!
We´re looking forward to receiving your application!

Nice-to-haves

Knowledge of phishing, malware, ransomware, account compromise, and insider-threat investigations is a plus
Basic understanding of SOAR technology is a plus
Understanding of common network services (Web, mail, DNS, authentication) is a plus
Previous hands-on experience in the field of IT security (Threat prevention, SIEM, Endpoint protection) is a plus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: successfactors
Effort: medium