Specialist Security Operations Engineering

You are responsible for the technical operation and further development of our central platform for security monitoring and detection You develop, implement and optimize detection use cases, correlation rules and alerting mechanisms to detect cyber threats at an early stage You analyze current attack techniques, threat actors and company-specific risks, identify detection gaps and derive concrete improvements You connect new systems, applications, cloud services and infrastructures to the monitoring platform. Together with the responsible departments, you prioritize monitoring, detection and logging requirements for business-critical services You develop monitoring standards, detection playbooks and technical operating procedures. Using key figures, you evaluate which threats the platform covers and how effectively it detects them In the event of security incidents, you support with technical analyses, forensic data and your detection expertise. You work closely with the SOC as well as the teams for Incident Response, Threat Intelligence and Security Engineering You advise security analysts on technical questions and take on the technical lead for complex, cross-divisional monitoring and detection initiatives

• You are responsible for the technical operation and further development of our central platform for security monitoring and detection
• You develop, implement and optimize detection use cases, correlation rules and alerting mechanisms to detect cyber threats at an early stage
• You analyze current attack techniques, threat actors and company-specific risks, identify detection gaps and derive concrete improvements
• You connect new systems, applications, cloud services and infrastructures to the monitoring platform. Together with the responsible departments, you prioritize monitoring, detection and logging requirements for business-critical services
• You develop monitoring standards, detection playbooks and technical operating procedures. Using key figures, you evaluate which threats the platform covers and how effectively it detects them
• In the event of security incidents, you support with technical analyses, forensic data and your detection expertise. You work closely with the SOC as well as the teams for Incident Response, Threat Intelligence and Security Engineering
• You advise security analysts on technical questions and take on the technical lead for complex, cross-divisional monitoring and detection initiatives

• A completed degree in computer science, IT security or a comparable subject or a comparable qualification with relevant professional experience
• Several years of experience in security monitoring, detection engineering, security analytics or security operations as well as sound practice in the development and optimization of detection rules, correlation logics and security analytics use cases
• Very good knowledge of modern SIEM, XDR, EDR, NDR and cloud security platforms as well as experience with the integration of complex IT services and applications into monitoring environments
• Sound knowledge of current attack techniques, threat actors and security frameworks such as MITRE ATT&CK, NIST CSF or Cyber Kill Chain as well as experience with threat intelligence and threat modeling
• Knowledge of log architectures, event management and security telemetry as well as good knowledge in the analysis of Windows, Linux, network, cloud and identity environments
• Basic knowledge of scripting and automation, e.g. with PowerShell or Python
• Very good German and English skills in written and spoken form