Cyber Security Incident Responder

Swisslog; Petaling Jaya; On-site; MYR 70,000 - 120,000; Full time

Job summary

Swisslog is seeking a Cyber Security Incident Responder in Malaysia to monitor, investigate, triage and respond to cybersecurity incidents across the enterprise. You will work within established SOC procedures, coordinate containment and remediation, and document actions in case management systems.

You will collaborate with global IT and security teams to reduce cyber risk and strengthen the organization’s security posture, while pursuing ongoing education and certifications to grow in this

Qualifications

• Monitoring, investigating, triaging and responding to cybersecurity incidents.
• Working within SOC procedures and SLAs.
• Collaborating with IT and security teams across the globe.

Responsibilities

• Perform daily security monitoring and incident response activities.
• Monitor and respond to security alerts using Microsoft Sentinel and Defender XDR.
• Document investigations and remediation actions in case management systems.
• Contribute to detection improvements and automation through SOAR playbooks.
• Manage multiple investigations and priorities simultaneously.

Skills

Security monitoring

Incident response

Log analysis

Case management

Education

Bachelor's degree in Cybersecurity or related field

Tools

Microsoft Sentinel

Microsoft Defender XDR

SOAR

Case management systems

Job description

Cyber Security Incident Responder

Where do people love what they do, and being great at what they do?

At Swisslog, that’s where! Our teams are the heart of a world-leading Robotics company that’s harnessing the power of technology to shape the future of intralogistics. The result? We’re transforming performance and efficiency for customers across the globe, giving them the vital edge in their markets.

Responsibilities Make an impact

• Perform daily security monitoring, incident triage, investigation, containment, and response activities in accordance with established SOC procedures and service level agreements (SLAs).
• Monitor, investigate, and respond to security alerts using Microsoft Sentinel, Microsoft Defender XDR, and other security technologies.
• Ability to identify issues, compromised computers using logs, and related computer-centric evidence sources
• Document investigations, findings, and remediation actions accurately within case management systems.
• Contribute to security use-case tuning and continuous detection improvement. Support automation initiatives through SOAR playbooks and workflow optimization.
• Demonstrate ability to perform event analysis and tools utilization (identification, response, escalation)
• Exercise attention to detail and due care in regards to work-related communication and documentation
• Exhibit willingness to learn, a desire to collaborate with others, and the drive to take on additional responsibilities when called upon
• Pursue job-related growth and knowledge via higher education, certification, and training
• Maintain awareness of changing processes, procedures, and standards critical to job performance
• Other duties as assigned
• Ability to manage multiple investigations and priorities simultaneously.

Application Requirements What you need to succeed

The Cyber Security Incident Responder is responsible for monitoring, investigating, triaging, and responding to cybersecurity incidents across the enterprise within established operating procedures. The role supports the Security Operations Center (SOC) by analyzing security alerts, conducting investigations, coordinating containment and remediation activities and continuously improving detection capabilities. The successful candidate will work closely with global IT and security teams to reduce cyber risk and strengthen the organization’s security posture.