Manage the entire incident lifecycle, including identification, analysis, containment, eradication, recovery, and post-incident tasks, ensuring a rapid and effective response to security events
Your RoleKey responsibilities in your new role
- Manage the entire incident lifecycle, including identification, analysis, containment, eradication, recovery, and post-incident tasks, ensuring a rapid and effective response to security events
- Operate, refine, and maintain incident response playbooks and runbooks while helping to improve the CSIRT’s internal toolset for greater operational efficiency and effectiveness
- Triage and investigate security alerts originating from SIEM and EDR platforms, driving rapid containment actions and supporting thorough remediation efforts to mitigate risks
- Conduct and support forensic investigations across systems, networks, memory, and disk, while analyzing attacker techniques, persistence mechanisms, and data exfiltration paths to uncover the full scope of incidents
- Coordinate all incident response activities, working closely and collaboratively with internal teams such as IT operations
- Leverage scripting and programming skills, preferably in Python, to develop and automate response and investigation workflows, enhancing detection capabilities and improving the efficiency of containment and reporting processes
- Contribute to a proactive security approach by participating in activities like tabletop exercises, red/ blue team engagements, and threat hunting; and actively share knowledge to build team-wide capability, while demonstrating willingness to participate in on-call rotations to provide after-hours support
Your ProfileQualifications and skills to help you succeed
- Degree in Computer Science, Cybersecurity, or a related technical field, or demonstrate equivalent professional experience
- At least 5 years of hands-on expertise in incident response, CSIRT/SOC operations, or digital forensics, showing direct involvement in managing and resolving real-world cyber incidents
- Exhibit proven technical proficiency in analyzing and responding to complex security incidents such as ransomware, insider threats, and supply-chain attacks, ensuring timely and effective mitigation
- Demonstrate a thorough understanding of network and system internals, including deep familiarity with network protocols, Windows and Linux operating systems, as well as cloud environments like AWS, Azure, and GCP is a plus
- Show practical experience working with SIEM solutions (such as Splunk, Sentinel, or Elastic), EDR tools (including CrowdStrike, Defender, or Elastic Endpoint Security), as well as forensic and network analysis utilities
- Possess the ability to script and automate analysis or response procedures, preferably in Python, with experience in PowerShell or Bash considered a must for enhancing operational efficiency
- Display strong analytical, written, and verbal communication skills, capable of organizing and disseminating critical information under pressure, developing and maintaining incident response playbooks, and preparing detailed reports for both technical and non-technical audiences
- Fluency in English
#WeAreIn for driving decarbonization and digitalization.
As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT. Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.
Are you in?
We are on a journey to create the best Infineon for everyone.
This means we embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities. We base our recruiting decisions on the applicant´s experience and skills. Learn more about our various contact channels.
Please let your recruiter know if they need to pay special attention to something in order to enable your participation in the interview process.