Teamlead Security Operation Center (m/w/d)
Core
Leading the development and operation of a 24/7 Security Operations Center (SOC) with a focus on Düsseldorf, managing the full Security Threat Lifecycle, and ensuring incident detection and response capabilities.
Role type
Senior Team Lead, Security Operations Center
Builds
SOC operational model, threat detection and response processes, incident management workflows, and standardized playbooks/automations (via careerplan.io/jobs/15939-BB-634162-7878-9519-S-teamlead-security-operation-center-mwd-at-rheinmetall-ag)
Domain
Cybersecurity, Security Operations, IT Service Management
Required skills
SOC operations and 24/7 business models, Security Threat Lifecycle management, Incident Detection and Response, Major Incident management, Stakeholder coordination, External vendor management, Process standardization, Playbook development, SOAR automation, SIEM/EDR/NDR/SOAR technologies, IT Service Management (ITIL)
Preferred skills
Strategic change management, Cross-functional collaboration with Security Engineering and Architecture
Technologies
SIEM, EDR, NDR, SOAR
Responsibilities
Develop and operate the central SOC in a 24/7 model, Implement and evolve the Security Threat Lifecycle, Ensure incident detection and response capabilities, Manage major incidents and escalations, Ensure SLA/KPI compliance, Coordinate external service providers, Collaborate with adjacent functions, Build standardized processes and automations, Create transparent reporting on threats and performance
Seniority
Senior, hands-on IC with leadership responsibilities
