Job Description

Not just a job, but a career

Yokogawa, award winner for ‘Best Asset Monitoring Technology’ and ‘Best Digital Twin Technology’ at the HP Awards, is a leading provider of industrial automation, test and measurement, information systems and industrial services in several industries.

Our aim is to shape a better future for our planet through supporting the energy transition, (bio)technology, artificial intelligence, industrial cybersecurity, etc. We are committed to the United Nations sustainable development goals by utilizing our ability to measure and connect.

About the Team

Our 18,000 employees work in over 60 countries with one corporate mission, to "co-innovate tomorrow". We are looking for dynamic colleagues who share our passion for technology and care for our planet. In return, we offer you great career opportunities to grow yourself in a truly global culture where respect, value creation, collaboration, integrity, and gratitude are highly valued and exhibited in everything we do.

Key Responsibilities

• Take end-to-end ownership of incident detection, investigation, containment, and remediation.
• Perform proactive threat hunting to uncover potential compromises or adversary activity.
• Analyse and fine-tune use cases in Next-Gen SIEM platforms (Palo Alto XSIAM).
• Utilize XDR platforms (Microsoft Defender suite, Palo Alto Cortex XDR, etc.) for advanced endpoint and cloud investigations.
• Monitor and handle alerts from:
• Firewalls / NGFWs (Palo Alto, Fortinet, Cisco, etc.)
• Active Directory / Identity platforms (On-premises AD, Azure AD / Entra ID, etc.)
• EDR/XDR solutions (Microsoft Defender, Cortex XDR, etc.)
• Email Security (Microsoft Defender for Office 365 preferred)
• Web Proxies / SWG (Zscaler ZIA, Cisco Umbrella, etc.)
• Cloud Security tools (Azure Security Center, Prisma Cloud, etc.)
• Understand SOAR platforms (preferably Cortex XSOAR) and provide input to platform engineers to build and improve automated response playbooks and workflows.
• Contribute ideas and implement improvements to SOC processes, detections, and automation.
• Stay updated on MITRE ATT&CK, threat intelligence, and evolving attacker TTPs.
• Collaborate with cross-functional teams to strengthen incident readiness and detection coverage.
• Reads reports, makes risk assessments, works to detect the source of attacks and tests current defenses against threats.
• Monitors security alerts and maintains awareness of new threats and vulnerabilities in order to identify potential risks.
• Conducts proactive investigations into potential threats by collecting data from multiple sources and analyzing it to identify patterns or other significant pieces of information that indicate a specific threat may be occurring or has occurred previously.
• Proficiency in threat hunting methodologies, including familiarity with tools and techniques for proactive detection of threats.

Working Conditions

• Willingness to work in rotational shifts, including weekends and public holidays

Required Qualifications

• 3-5 years of hands-on experience in SOC operations, incident response, or threat hunting.
• Strong expertise in SIEM/XDR solutions (XSIAM, Microsoft Defender suite, Cortex XDR, or equivalent).
• Practical knowledge of query languages:
• KQL (Microsoft)
• XQL (Palo Alto XSIAM / Cortex XDR)
• Experience handling alerts across firewalls, AD/Identity, XDR/EDR, email security, proxies, and cloud platforms.
• Strong understanding of the incident response lifecycle, attacker TTPs, and malware analysis.

Preferred / Nice-to-Have

• Certifications: CEH, CompTIA Security+, Microsoft Security certs, Palo Alto certs, or equivalent (good to have, not mandatory).
• Familiarity with multi-cloud security monitoring (Azure, AWS, GCP).
• Shell/Python scripting for automation and data analysis (good to have, not mandatory).
• Experience designing or refining SOC playbooks, runbooks, and automation workflows.

Why Join Us?

• Work hands-on with cutting-edge Next-Gen SIEM, XDR, and other security tools.
• Be empowered to drive improvements and shape the SOC’s future.
• A culture that values initiative, ownership, and innovation in security operations.

Yokogawa is an Equal Opportunity Employer. Yokogawa wants a diverse, equitable and inclusive culture. We will actively recruit, develop, and promote people from a variety of backgrounds who differ in terms of experience, knowledge, thinking styles, perspective, cultural background, and socioeconomic status. We will not discriminate based on race, skin color, age, sex, gender identity and expression, sexual orientation, religion, belief, political opinion, nationality, ethnicity, place of origin, disability, family relations or any other circumstances. Yokogawa values differences and enables everyone to belong, contribute, succeed, and demonstrate their full potential.

Are you being referred to one of our roles? If so, ask your connection at Yokogawa

about our Employee Referral process!