Senior Security Engineer: Incident Response & SOAR/SIEM

Joinimagine; Guadalupe; Híbrido; MXN 900.000 - 1.200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Career Development

Competitive Compensation and Benefits

Pay Transparency

Global Opportunities

Descripción de la vacante

Dematic seeks a Senior Security Engineer to lead incident response within the Cyber Defense Center, shaping the security posture across cloud and on‑prem environments. You will develop SIEM/SOAR capabilities, automate SOC operations, and drive proactive defenses while collaborating with global teams.

Ideal candidates have 3–5 years in security operations, strong Python/Java skills, and experience with cloud security and threat hunting.

Formación

• Bachelor's or Master's degree in related IT field, preferably cybersecurity.
• 3–5 years in security operations or cyber defense center.
• Strong Python programming skills.
• Deep knowledge of IT security (firewalls, EDR, IDS/IPS, SOAR, forensics, Threat Hunting).
• Familiarity with SOAR products and playbook development for automated SOC operation.
• Broad understanding of modern IT infrastructure.
• Knowledge of MITRE or cyber-attack kill chain.
• Preferred certifications: OSCP, Splunk or ELK engineer/architect, CISSP, GIAC (GSEC, GEVA, GPEN).
• Willingness to travel up to 10% (including international).

Responsabilidades

• Setting up and developing the KION Cyber Defense Center.
• Handling cyber security incidents and conducting client triage/forensic analyses.
• Participating in the Cyber Security on-call schedule to ensure security worldwide for the KION Group.
• Programming and scripting using Java, Python, etc.
• Using SOAR products for automation of security incidents and developing playbooks for automated SOC operation.
• Developing and integrating security detection methods for cloud environments like Azure, AWS, GCP.
• Evaluating security logs and distinguishing between malicious and benign activity.
• Making clear and independent decisions in very stressful situations.
• Analyzing and implementing information security, risk management, and privacy practices.
• Building proactive, collaborative working relationships with customers, peers and key team members based on respect and partnership.
• Modeling our Values of Integrity, Partnership, Courage, and Completion.

Conocimientos

Python

Java

Security operations

Threat hunting

Forensics

MITRE ATT&CK

Educación

Bachelor's or Master's degree in related IT field

Herramientas

SOAR

Azure

AWS

GCP

Splunk

Descripción del empleo

Dematic seeks a Senior Security Engineer to lead incident response within the Cyber Defense Center, shaping the security posture across cloud and on‑prem environments. You will develop SIEM/SOAR capabilities, automate SOC operations, and drive proactive defenses while collaborating with global teams.

Ideal candidates have 3–5 years in security operations, strong Python/Java skills, and experience with cloud security and threat hunting.