Security Operations Center Specialist

At Liebherr-IT Services GmbH, we value the development of individual and entrepreneurial needs and therefore live the flex office: We work in a hybrid model with flexible working hours - both on site and mobile.

• Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents
• Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations
• Assist in coordinating global containment, eradication, and recovery
• Contribute to refining incident response processes and tools
• Configure and manage Microsoft Sentinel, including data connectors, KQL queries, analytics rules, workbooks, log sources
• Support the onboarding and integration of various log sources, as well as administration of SOC infrastructure as needed
• Support the build of runbooks, continuous improvement and SOC reporting as needed

• A Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or related field, or otherwise justifiable experience
• 3+ years in cybersecurity, or proven relevant experience
• Good command of the English language (spoken, written) is required, German and French are a plus
• Good communication skills to work in an international hybrid team
• Demonstrable Experience with SIEM systems (Microsoft Sentinel, Splunk) & SOAR platforms
• Proficiency in scripting languages (Python, PowerShell)
• Security Certifications are an advantage (CISSP, SANS 450+ , Blue Team LVL x, OSCP, etc)
• Knowledge of cybersecurity frameworks and standards (e.g. ISO27001, NIST) is advantageous
• Advanced knowledge of security monitoring methodologies
• Incident management experience
• Good knowledge of MITRE ATT&CK Framework