Drive SIEM maturity alongside our Tech Lead by continuously developing our Google Chronicle & SOAR platform, building and tuning correlation rules, and designing automated playbooks to optimize detection engineering
Serve as the internal escalation point for our external SOC providers, taking over complex security incidents and improving the overall operational workflow
Support the continuous improvement and configuration of our defensive stack, including EDR and Firewall infrastructures
Manage infrastructure risks by assessing findings from Google SCC (Security Command Center) and coordinating vulnerability remediation across teams
Prepare, accompany, and evaluate external penetration tests while supporting team-wide business continuity management (BCM) and incident response strategies

University degree in the field of computer science, information security or a similar education
Several years of hands-on experience with modern SIEM/SOAR platforms (ideally Google SecOps / Chronicle) and solid scripting skills in PowerShell, Bash, or Python
A deep understanding of security automation principles, knowledge of Enterprise Firewalls as well as knowledge in the area of offensive security (“ethical hacking”)
Understanding of modern endpoint detection and response (EDR) solutions and defensive stacks, preferably Microsoft Defender or Jamf
Basic understanding of organizational security structures, including frameworks like ISO 27001, BSI-IT Grundschutz, or BCM methodologies
Very good communication skills in English, German is a plus

30 days of vacation plus additional days off on Christmas Eve and New Year's Eve
Hybrid work model with 50% presence at the headquarters each month
Learning flat rate in the in-house Academy
Company pension scheme
Monthly subsidies for sports membership or for the Urban Sports Club
Work-Life Portal
JobRad
Deutschland-Ticket subsidy
Pluxee card
Various offers and training opportunities with e-learning formats
Individual support, events and company celebrations
Incentivized employee referral program
Monthly after-work events
Barista bar with a wide selection of beverages and additional snacks
Massage offers
Annual health week
Weekly “juice day” with freshly pressed juices
24/7 kiosk
Influenza vaccinations
Free parking and e-charging stations in our underground garage

IT-Security Engineer

Key skills