IT Security Operations Engineer (gn)
Core
Building and evolving a modern Security Operations environment including SIEM, SOAR, and monitoring platforms to detect and respond to cyber attacks across on-premises, cloud, and hybrid infrastructures.
Role type
Senior IC Security Operations Engineer
Builds
Security operations platforms, detection use-cases, automation rules, and incident response capabilities
Domain
Cyber Security, IT Infrastructure, Cloud Security
Required skills
SIEM, EDR, SOAR, Incident Response, Vulnerability Management, Threat Intelligence, Threat Hunting, Forensics, Cloud Security, Network Security, Security Frameworks (ISO 27001, NIS2, BSI-Grundschutz)
Preferred skills
Enterprise/Corporate environment experience, Security Mindset
Technologies
SIEM, SOAR, EDR, XDR, NDR, UEBA, CSPM, CNAPP
Responsibilities
Build and develop modern Security Operations environments including SIEM, SOAR, and monitoring platforms; Develop detection use-cases, correlation rules, and automations for efficient cyber attack detection; Analyze, evaluate, and prioritize security events across on-premises, cloud, and hybrid environments; Conduct incident response measures for critical security incidents including containment, recovery, and post-incident analysis; Introduce and optimize structured processes in Vulnerability Management; Integrate and evaluate modern security technologies like EDR, XDR, NDR, UEBA, CSPM, or CNAPP; Conduct technical investigations and forensic analyses to determine the root cause of security events; Continuously improve the security maturity level through Threat Intelligence, Threat Hunting, and best-practice optimizations.
Seniority
Senior, hands-on IC