Senior Specialist Cyber Security

Infineon Technologies; Penang; On-site; MYR 80,000 - 120,000; Full time

Job summary

A global semiconductor leader in Penang is seeking a Cyber Security Incident Response Team (CSIRT) member. The chosen candidate will lead efforts in incident triage, containment, and recovery as part of a high-performing team. The role requires a Bachelor's degree in Information Security and at least 5 years of experience in cyber security incident response. Strong technical knowledge in tools like SIEM and EDR is necessary, alongside excellent communication skills. The company promotes a culture of diversity and inclusion, seeking candidates ready to drive innovation and customer success.

Benefits

Diverse and inclusive work environment

Opportunities for professional development

Qualifications

• 5 years of working experience in cyber-security incident response, CSIRT, or SOC leadership.
• Proven track record managing large-scale incidents including APT and ransomware.
• Deep knowledge of the OSI model, TCP/IP, and cloud services.
• Hands-on experience with scripting languages like PowerShell or Python is a plus.

Responsibilities

• Lead response efforts for security incidents affecting global information systems.
• Develop and refine incident response playbooks and runbooks.
• Coordinate with external partners for a unified response to threats.
• Conduct root-cause analyses and produce concise reports post-incident.
• Evaluate new incident response tools and recommend upgrades.

Skills

Cyber security incident response

Communication skills

Technical report writing

Education

Bachelor's degree in Information Security / Cyber Security

Tools

SIEM systems

EDR (CrowdStrike, MS-ATP)

Forensic tools (X-ways Autopsy, Axiom)

Wireshark

Job description

You will be the backbone of Infineon’s Cyber Security Incident Response Team (CSIRT).

Job Description

• Lead and support the triage, containment, eradication, and recovery of security incidents that affect Infineon’s global information systems, products, and services.
• Operate and refine the CSIRT’s playbooks, runbooks, and escalation matrix for all cybersecurity domains (network, endpoint, cloud, embedded, and supply chain).
• Coordinate with the Joint Operations Centre (JOC), Threat-Intelligence, Vulnerability Team, and external partners to ensure a unified, rapid response.
• Maintain a detailed incident documentation, conduct root‑cause analyses, and produce concise after‑action reports that drive continuous improvement.
• Participate in tabletop exercises, red‑team/blue‑team drills, and periodic reviews of the CSIRT program to keep it aligned with industry best‑practice frameworks.
• Use the CSIRT triage matrix to assess severity, scope, and potential impact of alerts from SIEM, EDR, network monitoring, and external threat‑intel sources.
• Deploy containment strategies (e.g., network segmentation, quarantine of infected endpoints, and malicious file removal) and work with system owners to eradicate threats.
• Plan and execute safe restoration of services, validate system integrity, and coordinate with the IT Service Desk to minimize downtime.
• Perform analysis of computers /servers activity, memory dumps, disk images, network packet captures, and log correlation to identify attacker techniques, persistence mechanisms, and data exfiltration paths.
• Maintain a secure, audit‑ready incident log; produce post‑mortem reports with timelines, findings, mitigations, and lessons learned.
• Evaluate new CSIRT tools (SOAR, threat‑intel platforms), recommend upgrades, and integrate them into existing workflows.
• Deliver incident updates to executive management, product teams, and external regulators; coordinate legal and PR responses when required.
• Conduct security incident drills for cross‑functional teams and mentor junior CSIRT analysts.
• Ensure incident handling meets GDPR, NIST, and relevant internal compliance requirements.

Your Profile

• Bachelor’s degree in Information Security / Cyber Security, or any equivalent academic background.
• At least 5 years of related working experience in cyber‑security incident response, CSIRT, or SOC leadership roles.
• Proven track record handling large‑scale, multi‑vector incidents (APT, ransomware, supply‑chain, insider threats).
• Deep knowledge of the OSI model, TCP/IP, Windows/Linux, cloud (AWS, Azure), VPN, DNS, DHCP, etc.
• Hands‑on and practical experience with SIEM systems, and EDR (CrowdStrike, MS-ATP)
• Experience with any of CQL, Kusto, Lucene / KQL syntax
• Scripting: PowerShell, Python, Bash as a plus
• Familiarity with forensic tools (X-ways Autopsy, Axiom) and network capture (Wireshark, Zeek) as a plus
• Security‑intelligence or incident‑response certifications (e.g., SANS SEC600, EC-Council CEH) are a plus.
• Clear written and verbal communication; skilled at producing concise technical reports.
• Proven ability to collaborate across distributed, cross‑functional teams.

#WeAreIn for driving decarbonization and digitalization.

As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game‑changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

Are you in?

We are on a journey to create the best Infineon for everyone.

This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills.

Please let your recruiter know if they need to pay special attention to something in order to enable your participation in the interview process.