Job Description

Join our Cyber Security Operations team and become a key contributor in protecting a global organization against evolving cyber threats. In this role, you will focus on Threat Detection and Response (TDR), working hands-on with security tools, incidents, and data to identify and mitigate risks. You will analyze security events, investigate incidents, and continuously improve detection capabilities and response playbooks.
As an Individual Contributor, you’ll work closely with experienced security professionals while taking ownership of complex investigations and driving improvements in our TDR processes. You will play a crucial role in translating real-world incidents into actionable insights that directly enhance our security posture.
This position is ideal for someone who thrives in a fast-paced environment, enjoys deep technical challenges, and wants to make a tangible impact on enterprise-scale cybersecurity operations.

• Investigate and respond to security incidents across endpoints, networks, and cloud environments
• Perform threat hunting activities to proactively detect suspicious behavior and emerging threats
• Analyze alerts and logs using tools such as SIEM, EDR, and network monitoring platforms
• Conduct root cause analysis and document findings in clear, actionable reports
• Contribute to the development and refinement of detection rules and response playbooks
• Collaborate with cross-functional teams to contain incidents and minimize business impact
• Continuously improve TDR processes, tooling, and operational efficiency
• Convey the proper security severity by explaining the risk exposure and its consequences to non-technical stakeholders
• Ensure the effectiveness and efficiency of the security incident response services and processes

• Bachelor’s degree in IT, Cybersecurity, or a related field (or equivalent experience)
• Solid hands-on experience in Threat Detection & Response, SOC, or Incident Response roles
• Experience in identifying, managing, and producing executive-level incident updates, reports, and recommendations to guide decision-making and risk management
• Relevant certifications such as GCIH, GCFA, or other certifications related to incident response and threat detection
• Strong understanding of security fundamentals, including network protocols and system architecture
• Experience with tools like Microsoft Sentinel, Microsoft Defender, QRadar, or similar platforms
• Analytical mindset with the ability to work independently and prioritize effectively
• Strong communication skills to articulate technical findings clearly

Hapag-Lloyd is one of the world’s leading liner shipping companies, connecting businesses and people across more than 600 ports worldwide With a fleet of over 300 modern container ships and a vessel capacity of 2.5 million TEU, we keep global trade moving reliably every day.

Our global network spans 140 countries, 400 offices, and a growing portfolio of terminal and infrastructure investments. This scale enables us to deliver consistent, high‑quality service across continents and to support our customers in even the most complex supply chains.

When you join us, you become part of more than 18,000 colleagues working across borders, functions, and cultures, to not only to deliver quality for our customers, but to create innovation and opportunities across roles, regions, and perspectives.

We believe that every exploration is a chance to grow, and every port is a place to belong.