Senior Cyber Incident Responder & Forensics Lead

Medtronic; Bogotá; Presencial; COP 180.000.000 - 240.000.000; Jornada completa

Descripción de la vacante

Medtronic is seeking a Principal Cybersecurity Incident Responder in Bogotá, Colombia. You will lead complex investigations across endpoint, identity, cloud, and network environments, coordinating with Security Operations, IT, Privacy, and Legal.

Strong SIEM and EDR experience, plus automation and forensic skills, are essential. The role emphasizes incident response, threat containment, and continuous improvement within the Global Forensics & Incident Response team.

Formación

• Bachelor's degree with 7+ years of cybersecurity experience or Master's with 5+ years.
• Hands-on experience leading cybersecurity incident response investigations.
• Strong experience with SIEM platforms.
• Experience utilizing CrowdStrike or similar EDR solutions.

Responsabilidades

• Lead end-to-end cyber incident investigations from identification to resolution.
• Investigate security alerts across endpoint, identity, cloud, email, and network.
• Use SIEM, CrowdStrike, EDR, and XDR to identify and respond to threats.
• Conduct digital forensic investigations to determine root cause and impact.
• Coordinate response with Security Operations, IT, Privacy, and Legal.
• Develop and improve investigation workflows, dashboards, and playbooks.
• Drive process improvements for efficiency and visibility.
• Communicate findings to technical and non-technical audiences, including leadership.

Conocimientos

SIEM platforms

CrowdStrike

EDR experience

Threat analysis

Analytical skills

Educación

Bachelor's degree in Cybersecurity or related field

Master's degree (advantage)

Herramientas

XDR

Forensic tooling

Descripción del empleo

Medtronic is seeking a Principal Cybersecurity Incident Responder in Bogotá, Colombia. You will lead complex investigations across endpoint, identity, cloud, and network environments, coordinating with Security Operations, IT, Privacy, and Legal.

Strong SIEM and EDR experience, plus automation and forensic skills, are essential. The role emphasizes incident response, threat containment, and continuous improvement within the Global Forensics & Incident Response team.