Security Operations Center Specialist

Beschreibung

Job Zusammenfassung In dieser Rolle konfigurierst du Sicherheitswerkzeuge, entwickelst Use Cases und überwachst Sicherheitsereignisse, führst Vorfallbewertungen durch und unterstützt die Incident-Response-Prozesse im SOC. Job Zusammenfassung In dieser Rolle konfigurierst du Sicherheitswerkzeuge, entwickelst Use Cases und überwachst Sicherheitsereignisse, führst Vorfallbewertungen durch und unterstützt die Incident-Response-Prozesse im SOC. Deine Rolle im Team Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents. Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations. Assist in coordinating global containment, eradication, and recovery. Contribute to refining incident response processes and tools. Configure and manage Microsoft Sentinel, including data connectors, KQL queries, analytics rules, workbooks, log sources. Support the onboarding and integration of various log sources, as well as administration of SOC infrastructure as needed. Support the build of runbooks, continuous improvement and SOC reporting as needed. Unsere Erwartungen an dich Ausbildung A Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field, or otherwise justifiable experience. Qualifikationen Good command of the English language (spoken, written) is required, German and French are a plus. Good communication skills to work in an international hybrid team. Proficiency in scripting languages (Python, PowerShell). Security Certifications are an advantage (CISSP, SANS 450+ , Blue Team LVL x, OSCP, etc). Knowledge of cybersecurity frameworks and standards (e.g. ISO27001, NIST) is advantageous. Advanced knowledge of security monitoring methodologies. Good knowledge of MITRE ATT&CK Framework. Erfahrung 3+ years in cybersecurity, or proven relevant experience. Demonstrable Experience with SIEM systems (Microsoft Sentinel, Splunk) & SOAR platforms. Incident management experience. Benefits Gesundheit, Fitness & Fun 👩‍⚕️ Betriebsarzt 🙂 Gesundheitsförderung Work-Life-Integration ⏰ Flexible Arbeitszeiten Themen mit denen du dich im Job beschäftigst Cyber/Security Metadaten Level: Erfahren Job Feld: IT, Security Anstellung: Vollzeit Vertragsart: Unbefristetes Dienstverhältnis Arbeitsmodell: Hybrid, Onsite Unternehmenstyp: Etablierte Firma Branche: Industrie, Produktion Ort: Kirchdorf an der Iller, Kirchdorf am Inn | Kirchdorf an der Iller | 88457 | Deutschland | Kirchdorf am Inn | 84375

Tech Stack