Prin Cybersecurity Specialist

medtronic; Bogotá ciudad; On-site; COP 120,000,000 - 190,000,000; Full time

Job summary

Medtronic seeks a Principal Cybersecurity Incident Responder to lead complex investigations and protect enterprise systems and data. This onsite role in Bogotá, Colombia partners with Security Operations, IT, Privacy, Legal, and business stakeholders to contain threats and strengthen capabilities through incident response and forensics.

The candidate will automate workflows, develop playbooks, and drive improvements across endpoint, cloud, email, and network security, collaborating with global

Qualifications

• Bachelor's degree with 7+ years of cybersecurity experience or Master's degree with 5+ years of cybersecurity experience.
• Hands-on experience leading and conducting cybersecurity incident response investigations.
• Strong experience with Security Information and Event Management (SIEM) platforms.
• Experience utilizing CrowdStrike or similar Endpoint Detection and Response (EDR) solutions.
• Experience investigating incidents across endpoint, identity, email, cloud, and network environments.
• Strong analytical, troubleshooting, and problem-solving skills.
• Ability to manage multiple priorities in a fast-paced environment.
• Experience communicating technical findings to a variety of stakeholder groups.
• Experience developing automation or scripting solutions using PowerShell, Python, or similar technologies.

Responsibilities

• Lead end-to-end cyber incident investigations, driving response activities from identification through resolution and post-incident review
• Investigate security alerts and suspicious activity across endpoint, identity, cloud, email, and network environments
• Utilize SIEM, CrowdStrike, EDR, XDR, and other security platforms to identify, investigate, and respond to cyber threats
• Conduct digital forensic investigations to determine attacker behavior, root cause, scope of compromise, and business impact
• Coordinate response and remediation activities with Security Operations, Information Technology, Privacy, Legal, and business stakeholders
• Develop and enhance investigation workflows, response playbooks, operational dashboards, and automation capabilities
• Drive process improvements that increase efficiency, visibility, and incident response effectiveness
• Communicate technical findings and incident updates to both technical and non-technical audiences, including leadership teams
• Participate in the team's on-call rotation and support high-priority incidents as required
• Contribute to a collaborative culture focused on teamwork, knowledge sharing, and continuous improvement

Skills

Cybersecurity leadership

Incident response

SIEM

EDR

Threat intelligence

Automation scripting

Stakeholder communication

Education

Bachelor's degree in cybersecurity or related field

Master's degree (preferred)

Tools

CrowdStrike

SIEM platforms

EDR tools

XDR

Job description

Careers that change lives start here. Medtronic is a global leader in healthcare technology with a Mission to alleviate pain, restore health, and extend life. Our 95,000 employees work across more than 150 countries to put patients first — developing innovative medical technologies that improve the lives of 72+ million patients each year. Your unique talents will help shape the future of healthcare while building a career grounded in purpose, growth, and impact.

A Day in the Life

We’re a mission-driven leader in medical technology and solutions with a legacy of integrity and innovation. Work with us to incentivize better patient care and partner across the industry to make healthcare more affordable and accessible. Be a part of a community of experts committed to ensuring quality, affordable healthcare worldwide.

The Principal Cybersecurity Incident Responder is responsible for leading complex cyber incident investigations and protecting enterprise systems, data, and business operations across endpoint, identity, cloud, email, and network environments. As part of Medtronic's Global Forensics & Incident Response team, this role partners with Security Operations, Threat Intelligence, IT, Privacy, Legal, and business stakeholders to contain threats, reduce risk, and strengthen cybersecurity capabilities through incident response, forensic analysis, and continuous improvement.

This position is based onsite in Bogotá, Colombia and is ideal for professionals who thrive in a fast-paced environment, enjoy solving complex security challenges, and have a strong focus on collaboration, automation, and operational excellence.

Responsibilities may include the following and other duties may be assigned:

• Lead end-to-end cyber incident investigations, driving response activities from identification through resolution and post-incident review
• Investigate security alerts and suspicious activity across endpoint, identity, cloud, email, and network environments
• Utilize SIEM, CrowdStrike, EDR, XDR, and other security platforms to identify, investigate, and respond to cyber threats
• Conduct digital forensic investigations to determine attacker behavior, root cause, scope of compromise, and business impact
• Coordinate response and remediation activities with Security Operations, Information Technology, Privacy, Legal, and business stakeholders
• Develop and enhance investigation workflows, response playbooks, operational dashboards, and automation capabilities
• Drive process improvements that increase efficiency, visibility, and incident response effectiveness
• Communicate technical findings and incident updates to both technical and non-technical audiences, including leadership teams
• Participate in the team's on-call rotation and support high-priority incidents as required
• Contribute to a collaborative culture focused on teamwork, knowledge sharing, and continuous improvement

Required Knowledge and Experience:

• Bachelor's degree with 7+ years of cybersecurity experience or Master's degree with 5+ years of cybersecurity experience
• Hands-on experience leading and conducting cybersecurity incident response investigations.
• Strong experience with Security Information and Event Management (SIEM) platforms
• Experience utilizing CrowdStrike or similar Endpoint Detection and Response (EDR) solutions
• Experience investigating incidents across endpoint, identity, email, cloud, and network environments
• Strong analytical, troubleshooting, and problem-solving skills
• Ability to manage multiple priorities in a fast-paced environment
• Experience communicating technical findings to a variety of stakeholder groups
• Experience developing automation or scripting solutions using PowerShell, Python, or similar technologies

Preferred Qualifications

• Experience in Digital Forensics and Incident Response (DFIR)
• Experience performing threat hunting and advanced security investigations
• Experience developing automation workflows, dashboards, and operational reporting solutions
• Experience working within a Security Operations Center (SOC), Incident Response, or Managed Security Services environment
• Experience supporting global teams across multiple time zones
• GIAC/SANS certifications such as GCIH, GCFA, GCFE, GCIA, GCFR, or similar cybersecurity certifications

Physical Job Requirements

The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position.

Benefits & Compensation

Medtronic offers a competitive Salary and flexible Benefits Package A commitment to our employees lives at the core of our values. We recognize their contributions. They share in the success they help to create.We offer a wide range of benefits, resources, and competitive compensation plans designed to support you at every career and life stage.

This position is eligible for a short-term incentive called the Medtronic Incentive Plan (MIP).