IT Security Operations Engineer (gn)
Core
Building and evolving a modern Security Operations environment including SIEM, SOAR, and monitoring platforms to detect and respond to cyber attacks across on-premises, cloud, and hybrid infrastructures.
Role type
Senior IC security operations engineer (incident response & threat hunting)
Builds
Detection use-cases, correlation rules, automations, and structured security processes
Domain
Cyber Security / IT Infrastructure / Cloud Security
Required skills
SIEM, EDR, SOAR, Incident Response, Threat Hunting, Vulnerability Management, Cloud Security, Network Security, Forensics, Threat Intelligence
Preferred skills
Enterprise environment experience, ISO 27001, NIS2, BSI-Grundschutz
Technologies
SIEM, SOAR, EDR, XDR, NDR, UEBA, CSPM, CNAPP
Responsibilities
Build and develop modern Security Operations environments including SIEM, SOAR, and monitoring platforms; Develop detection use-cases, correlation rules, and automations for efficient cyber attack detection; Analyze, evaluate, and prioritize security events across on-premises, cloud, and hybrid environments; Conduct incident response measures for critical security incidents including containment, recovery, and post-incident analysis; Introduce and optimize structured processes in vulnerability management; Integrate and evaluate modern security technologies like EDR, XDR, NDR, UEBA, CSPM, or CNAPP; Conduct technical investigations and forensic analyses to determine the root cause of security events; Continuously improve the security maturity level through threat intelligence, threat hunting, and best-practice optimizations
Seniority
Senior, hands-on IC
