Cyber Security Incident Responder

Swisslog Holding AG; Newport News (VA); Hybrid; USD 90.000 - 130.000; Vollzeit

Zusammenfassung

Swisslog Holding AG in Newport News, VA, is seeking a Cyber Security Incident Responder to monitor, triage, and respond to security incidents across the enterprise within SOC procedures. You will work with global IT and security teams to strengthen the organization’s security posture.

Role requires IT security experience, Windows OS knowledge, SIEM/EDR hands-on skills, and the ability to document investigations and remediation actions. Opportunities for growth and learning are provided.

Qualifikationen

• IT or security-related degree or equivalent practical experience.
• Experience with Windows OS and general IT troubleshooting.
• Knowledge of phishing, malware, ransomware, and insider-threat investigations is a plus.
• Familiarity with SOAR technology is a plus.
• Experience in a 24x7 SOC or shift-based environment is advantageous.
• Understanding of common network services (Web, mail, DNS, authentication).
• Hands-on IT security experience (Threat prevention, SIEM, EPP).
• Experience with scripting (PowerShell or Python) is advantageous.

Aufgaben

• Perform daily security monitoring, incident triage, investigation, containment, and response per SOC procedures and SLAs.
• Monitor, investigate, and respond to alerts using Defender XDR, Sentinel, and other security technologies.
• Identify issues and compromised machines from logs and evidence sources.
• Document investigations, findings, and remediation actions in case management systems.
• Contribute to security use-case tuning and continuous detection improvements; support SOAR playbooks.
• Demonstrate event analysis and tool utilization (identification, response, escalation).
• Maintain accuracy and care in communications and documentation.
• Show willingness to learn, collaborate, and take on additional responsibilities.
• Pursue growth via education, certification, and training.
• Stay aware of changing processes, procedures, and security standards.

Kenntnisse

Windows OS knowledge

Threat prevention

SIEM experience

Incident response

Python/PowerShell scripting

SOC operations

Network fundamentals

Event analysis

Ausbildung

Bachelor's degree in Computer Science, Information Security, IT, or related field, or equivalent practical experience

Tools

Microsoft Defender XDR

Microsoft Sentinel

SOAR platforms

Endpoint protection tools

Jobbeschreibung

Cyber Security Incident Responder

Where do people love what they do, and being great at what they do?

At Swisslog, that’s where! Our teams are the heart of a world-leading Robotics company that’s harnessing the power of technology to shape the future of intralogistics. The result? We’re transforming performance and efficiency for customers across the globe, giving them the vital edge in their markets.

Responsibilities

Make an impact The Cyber Security Incident Responder is responsible for monitoring, investigating, triaging, and responding to cybersecurity incidents across the enterprise within established operating procedures. The role supports the Security Operations Center (SOC) by analyzing security alerts, conducting investigations, coordinating containment and remediation activities, and continuously improving detection capabilities. The successful candidate will work closely with global IT and security teams to reduce cyber risk and strengthen the organization's security posture.

• Perform daily security monitoring, incident triage, investigation, containment, and response activities in accordance with established SOC procedures and service level agreements (SLAs).
• Monitor, investigate, and respond to security alerts using Microsoft Sentinel, Microsoft Defender XDR, and other security technologies.
• Ability to identify issues, compromised computers using logs, and related computer-centric evidence sources
• Document investigations, findings, and remediation actions accurately within case management systems.
• Contribute to security use-case tuning and continuous detection improvement. Support automation initiatives through SOAR playbooks and workflow optimization.
• Demonstrate ability to perform event analysis and tools utilization (identification, response, escalation)
• Exercise attention to detail and due care in regards to work-related communication and documentation.
• Exhibit willingness to learn, a desire to collaborate with others, and the drive to take on additional responsibilities when called upon.
• Pursue job-related growth and knowledge via higher education, certification, and training.
• Maintain awareness of changing processes, procedures, and standards critical to job performance.

Application Requirements

What you need to succeed

• IT Experience Or Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field, or equivalent practical experience.
• Knowledge of windows OS / General IT (Debugging and IT Problem solving)
• Knowledge of phishing, malware, ransomware, account compromise, and insider-threat investigations is a plus
• Basic understanding of SOAR technology is a plus
• Experience working in a 24x7 SOC or shift-based operational environment is an advantage.
• Understanding of common network services (Web, mail, DNS, authentication) is a plus
• Previous hands-on experience in the field of IT security (Threat prevention, SIEM, Endpoint protection) is a plus
• Experience with scripting or automation using PowerShell, Python, or similar technologies is an advantage.