What's the role?
Team:
You will join a global Security Operations Center (SOC) and Incident Response team operating across multiple regions, responding to incidents during EMEA business hours. In this role, you’ll collaborate with some of the brightest minds in cybersecurity to protect our organization from evolving threats. The SOC’s mission is to proactively identify, detect, and respond to security incidents within the HERE environment, performing in-depth forensic analysis to prevent future occurrences. We adhere to industry best practices throughout the incident response lifecycle while leveraging innovative approaches to tackle the most complex security challenges.
As a Senior Security Engineer, you will serve as an individual contributor focused on security incident response, investigations, and digital forensics. You will triage, investigate, and resolve security incidents across enterprise and cloud environments, and help strengthen incident response capabilities through process improvements, metrics, and threat-informed recommendations.
Key Responsibilities
1. Triage, investigate, and resolve security incidents from multiple sources, following established playbooks, including (but not limited to):
Phishing email reports
SIEM/SOAR alerts (Splunk)
Cloud security alerts (AWS/Azure)
Endpoint Detection & Response alerts (CrowdStrike)
Host-based proxy alerts (Zscaler)
Abuse reports, account compromises, and other security escalations
2. Perform in-depth incident investigations, including forensic evidence collection and analysis, to determine scope, root cause, and impact.
3. Conduct malware behavior analysis to assess impact and recommend remediation across Linux, Windows, and macOS environments.
4. Help improve incident response processes by providing feedback, documenting lessons learned, and tracking operational metrics for leadership.
5. Perform threat analysis of emerging threats and communicate findings, recommendations, and risk implications to management.
6. Stay current with attacker tactics, techniques, and procedures (TTPs) to identify and respond to sophisticated threats.
7. Clearly articulate incident details and response actions to business stakeholders and non-technical audiences.
Who are you?
8. Bachelor's or Master’s degree in Computer Science, Engineering, or equivalent practical experience.
9. 5+ years of professional experience in Security Operations, Incident Response, Digital Forensics, or a closely related cybersecurity role.
10. Strong knowledge of incident response processes and incident handling; GCIH/GCIA/GNFA (or equivalent) certifications are a plus.
11. Malware analysis skills: ability to analyze malware behavior, assess impact, and recommend remediation across Linux, Windows, and macOS environments.
12. Digital forensics experience: solid understanding of forensic evidence collection and analysis to support incident investigations.
13. Strong security fundamentals, including modern attack vectors, exploitation techniques, and attack execution patterns.
14. Cloud experience required: hands-on experience investigating and responding to security incidents in AWS and/or Azure (., log sources, IAM, network controls, cloud-native security services).
15. Excellent communication skills; fluent in English.
What Do We Offer?
16. Work on the development of large-scale services, serving and storing petabytes of data
17. Work with cutting-edge, modern technologies
18. A great work-life balance
19. Flexible working hours
20. Competitive salary plus bonus
21. Fantastic & talented people from 60+ countries worldwide
Change is HERE. Apply Now!
As part of HERE Technologies employment process, candidates will be required to successfully complete a pre-employment screening process. This offer and any related claims are subject to the successful completion of a pre-employment screening. This will involve employment, education, and criminal verification if applicable.
#LI-AY2 #LI-HYBRID