Senior Staff Analyst Cyber Security

Manage the entire incident lifecycle, including identification, analysis, containment, eradication, recovery, and post-incident tasks, ensuring a rapid and effective response to security events.

Key responsibilities in your new role:

• Operate, refine, and maintain incident response playbooks and runbooks, while helping to improve the CSIRT’s internal toolset for greater operational efficiency and effectiveness.
• Triage and investigate security alerts originating from SIEM and EDR platforms, driving rapid containment actions and supporting thorough remediation efforts to mitigate risks.
• Conduct and support forensic investigations across systems, networks, memory, and disk, while analyzing attacker techniques, persistence mechanisms, and data exfiltration paths to uncover the full scope of incidents.
• Coordinate all incident response activities, working closely and collaboratively with internal teams such as IT operations.
• Leverage scripting and programming skills, preferably in Python, to develop and automate response and investigation workflows, enhancing detection capabilities and improving the efficiency of containment and reporting processes.
• Contribute to a proactive security approach by participating in activities like tabletop exercises, red/blue team engagements, and threat hunting; actively share knowledge to build team-wide capability, while demonstrating willingness to participate in on-call rotations to provide after-hours support.

Your Profile:

• Degree in Computer Science, Cybersecurity, or a related technical field, or demonstrate equivalent professional experience.
• At least 5 years of hands-on expertise in incident response, CSIRT/SOC operations, or digital forensics, showing direct involvement in managing and resolving real-world cyber incidents.
• Exhibit proven technical proficiency in analyzing and responding to complex security incidents such as ransomware, insider threats, and supply-chain attacks, ensuring timely and effective mitigation.
• Demonstrate a thorough understanding of network and system internals, including deep familiarity with network protocols, Windows and Linux operating systems, as well as cloud environments like AWS, Azure, and GCP is a plus.
• Show practical experience working with SIEM solutions (such as Splunk, Sentinel, or Elastic), EDR tools (including CrowdStrike, Defender, or Elastic Endpoint Security), as well as forensic and network analysis utilities.
• Possess the ability to script and automate analysis or response procedures, preferably in Python, with experience in PowerShell or Bash considered a must for enhancing operational efficiency.
• Display strong analytical, written, and verbal communication skills, capable of organizing and disseminating critical information under pressure, developing and maintaining incident response playbooks, and preparing detailed reports for both technical and non-technical audiences.
• Fluency in English.

We embrace diversity and inclusion and welcome everyone for who they are. At Infineon, we offer a working environment characterized by trust, openness, respect and tolerance and are committed to give all applicants and employees equal opportunities.