Cyber Incident Responder Specialist

JOB DESCRIPTION: Cyber Incident Responder Specialist About Abbott Abbott is a global healthcare leader, creating breakthrough science to improve people’s health. We’re always looking towards the future, anticipating changes in medical science and technology. Working at Abbott At Abbott, you can do work that matters, grow, and learn, care for yourself and family, be your true self and live a full life. You will have access to: Career development with an international company where you can grow the career you dream of. A company recognized as a great place to work in dozens of countries around the world and named one of the most admired companies in the world by Fortune. A company that is recognized as one of the best big companies to work for as well as a best place to work for diversity, working mothers, female executives, and scientists. The Opportunity This is a role based in Bogotá, Colombia. Responsible for investigating, analyzing, and responding to security incidents across the organization’s environment.Leads or executes complex incident response activities, adapts standard procedures to evolving threats.Plays a critical role in protecting the organization’s technology assets by identifying, analyzing, and responding to cybersecurity threats that may result in unauthorized access, misuse, or disruption of services. WHAT YOU’LL DO Monitor security alerts and events from various tools (SIEM, EDR, IDS/IPS, etc.) to identify potential incidents. Perform triage, correlation, and in-depth analysis of security events, including indicators of compromise (IOCs), malware activity, phishing attempts, and suspicious network behavior. Conduct forensic analysis on systems, networks, and endpoints to determine root cause and scope of incidents. Develop and implement response strategies to mitigate immediate threats and prevent recurrence. Support the implementation, tuning, and monitoring of security tools such as SIEM, EDR, firewalls, and intrusion detection systems. Ensure security controls are effectively detecting and preventing malicious activity. Validate and enhance alerting mechanisms to reduce false positives and improve detection accuracy. Document incidents thoroughly, including timelines, impact assessments, and remediation actions. Position Accountability & Scope Accountable for timely detection, analysis, and response to cybersecurity incidents to minimize organizational risk and business disruption. Works under moderate supervision but exercises independent judgment when handling incidents and escalating issues. Responsible for maintaining the confidentiality, integrity, and availability of organizational systems and data. Collaborates cross-functionally with IT, network, security engineering, and business teams during incident response activities. Contributes to continuous improvement of incident response processes, playbooks, and detection capabilities. Ensures compliance with internal security policies, standards, and regulatory requirements. Required Qualifications Bachelor's degree in Information Technology or similar area; or equivalent work experience. 2 years of technical experience in a Security Operations Center (SOC), incident response, or cybersecurity-related role. Demonstrated experience with security monitoring and investigation tools (e.g., SIEM such as Splunk, EDR platforms, email security tools). Strong understanding of network protocols, operating systems, enterprise security controls and frameworks such as MITRE ATT&CK. Apply now Follow your career aspirations to Abbott for diverse opportunities with a company that can help you build your future and live your best life. Abbott is an Equal Opportunity Employer, committed to employee diversity. Connect with us at , on Facebook at and on Twitter @AbbottNews and @AbbottGlobal. The base pay for this position is N/A In specific locations, the pay range may vary from the range posted. JOB FAMILY: Information Risk & Quality Assurance DIVISION: BTS Business Technology Services LOCATION: Colombia > Bogota : Building II ADDITIONAL LOCATIONS: WORK SHIFT: Standard TRAVEL: No MEDICAL SURVEILLANCE: Yes SIGNIFICANT WORK ACTIVITIES: Not Applicable