Senior Cyber Security Engineer

KION Group; Guadalupe; Híbrido; MXN 900.000 - 1.300.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career Development

Competitive Compensation and Benefits

Pay Transparency

Global Opportunities

Descripción de la vacante

KION Group is seeking a Senior Security Engineer for our Cyber Defense Center in Mexico. You will drive incident response, manage SOAR and SIEM systems, and strengthen security across cloud and on-prem environments.

Join a team that handles worldwide security operations, develops playbooks, tunes detection, and collaborates with customers and peers. Travel up to 10% may be required, and you will work in a hybrid setup.

Formación

• Bachelor’s or Master’s degree in IT or cyber security.
• 3–5 years in security operations or cyber defense center.
• Proficient Python programming.
• Deep IT security knowledge (firewalls, EDR, IDS/IPS, SOAR, forensics).
• Experience with SOAR playbooks for automated SOC operation.
• Knowledge of MITRE ATT&CK framework.
• Ability to travel up to 10% (international).

Responsabilidades

• Set up and continuously develop the KION Cyber Defense Center.
• Handle cyber security incidents and forensic analyses of cyber-attacks.
• Participate in the cybersecurity on-call schedule to ensure worldwide security.
• Program and script using Python and other languages.
• Use SOAR for automation and develop playbooks for SOC operations.
• Develop detection methods for Azure, AWS, and GCP environments.
• Evaluate security logs and distinguish malicious vs benign activity.
• Make clear decisions in high-stress situations.
• Collaborate with customers, peers and key team members.

Conocimientos

Python

Incident response

Threat Hunting

Cloud security

On-prem security

SIEM

SOAR

Educación

Bachelor’s or Master’s degree in IT or Cyber Security

Herramientas

SOAR

Splunk

ELK

Azure

AWS

GCP

Descripción del empleo

As a Senior Security Engineer in our Cyber Defense Center, you will play a pivotal role in improving our security posture through effective incident response and the management of our SOAR (Security Orchestration Automation and Response) and SIEM (Security Information and Event Management) systems. Your expertise will enable the team to efficiently handle security incidents in cloud and on-premises environments.

We offer:

What We Offer

• Career Development
• Competitive Compensation and Benefits
• Pay Transparency
• Global Opportunities

Learn More Here: https://www.dematic.com/en-us/about/careers/what-we-offer/

Dematic provides equal employment opportunities to all employees and applicants foremployment and prohibits discrimination and harassment of any type without regard to race,color, religion, age, sex, national origin, disability status, genetics, protected veteran status,sexual orientation, gender identity or expression, or any other characteristic protected byfederal, state, or local laws.

This policy applies to all employment terms and conditions, including recruiting, hiring,placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation,and training.

Tasks and Qualifications:

Responsibilities

To be successful in this role, your consistent record will enable you to deliver against the following key performance areas:

• Setting up and continuously developing the KION Cyber Defense Center.

• Handling cyber security incidents and conducting client triage/forensic analyses of cyber-attacks

• Participating in the Cyber Security on-call schedule to ensure security worldwide for the KION Group.

• Programming and script writing using Java, Python, etc.

• Using SOAR products for the automation of security incidents and developing playbooks for automated SOC operations.

• Developing and integrating security detection methods for cloud environments like Azure, AWS, GCP to mitigate risks.

• Evaluating the results of security logs and distinguishing between malicious and benign activity.

• Making clear and independent decisions in very stressful situations.

• Analyzing and implementing information security, risk management, and privacy practices.

• Building proactive, collaborative working relationships with customers, peers and key team members based on respect and partnership.

• Modeling our Values of Integrity, Partnership, Courage, and Completion

Qualifications:

• Bachelor’s or Master’s degree or equivalent experience in a related IT field, preferably with a focus on cyber security.

• 3 -5 years of working experience in security operations or cyber security defense center.

• Proficient programming skills, particularly in Python.

• Deep knowledge in the field of IT security (firewalls, EDR, IDS/IPS, SOAR, detection engineering, forensics and Threat Hunting).

• Familiarity with SOAR products for the automation of security incidents including using playbook development for an automated SOC operation.

• Broad understanding in all areas of modern IT infrastructure.

• Knowledge in security classification frameworks like MITRE or the cyber-attack kill chain.

• Preferred certifications: OSCP, Splunk or ELK engineer or architect, CISSP, GIAC (GSEC, GEVA, GPEN etc.)

• Ability to travel up to 10% travel (including international)

#LI-AM3

#Hybrid