Senior Cyber Defense Engineer: SOAR, SIEM & Cloud Security

Dematic; Guadalupe; Presencial; MXN 700.000 - 1.000.000; Jornada completa

Descripción de la vacante

Dematic is seeking a Senior Security Engineer to strengthen our Cyber Defense Center. You will lead incident response, develop and optimize SOAR playbooks, and enhance detection for cloud and on-prem environments. Strong programming (Python) and hands-on security operations experience are essential.

You will collaborate globally, perform forensics analyses, and contribute to risk management, privacy practices, and security architecture. Travel up to 10% is expected.

Formación

• Bachelor’s or Master’s degree or equivalent experience in a related IT field, preferably with a focus on cyber security.
• 3-5 years of working experience in security operations or cyber security defense center.
• Proficient programming skills, particularly in Python.
• Deep knowledge in the field of IT security (firewalls, EDR, IDS/IPS, SOAR, detection engineering, forensics and Threat Hunting).
• Familiarity with SOAR products for the automation of security incidents including using playbook development for an automated SOC operation.
• Broad understanding in all areas of modern IT infrastructure.
• Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain.
• Preferred certifications: OSCP, Splunk or ELK engineer or architect, CISSP, GIAC (GSEC, GEVA, GPEN etc.)
• Ability to travel up to 10% travel (including international)

Responsabilidades

• Setting up and continuously developing the KION Cyber Defense Center.
• Handling cyber security incidents and conducting client triage/forensic analyses of cyber-attacks
• Participating in the Cyber Security on-call schedule to ensure security worldwide for the KION Group.
• Programming and script writing using Java, Python, etc.
• Using SOAR products for the automation of security incidents and developing playbooks for automated SOC operations.
• Developing and integrating security detection methods for cloud environments like Azure, AWS, GCP to mitigate risks.
• Evaluating the results of security logs and distinguishing between malicious and benign activity.
• Making clear and independent decisions in very stressful situations.
• Analyzing and implementing information security, risk management, and privacy practices.
• Building proactive, collaborative working relationships with customers, peers and key team members based on respect and partnership.

Conocimientos

Python

SOAR

Threat Hunting

Firewall Security

EDR/IDS/IPS

Forensics

MITRE ATT&CK

Cloud Security

Educación

Bachelor's or Master's in IT / Cyber Security

Herramientas

Splunk

ELK

SOAR platforms

Descripción del empleo

Dematic is seeking a Senior Security Engineer to strengthen our Cyber Defense Center. You will lead incident response, develop and optimize SOAR playbooks, and enhance detection for cloud and on-prem environments. Strong programming (Python) and hands-on security operations experience are essential.

You will collaborate globally, perform forensics analyses, and contribute to risk management, privacy practices, and security architecture. Travel up to 10% is expected.