Description

In this role, you will be at the forefront of cyber defense, managing daily operations and incident responses while collaborating with various teams to enhance security measures. Your expertise will help shape the effectiveness of the SOC and guide the next generation of analysts.

Requirements

• •5+ years of experience in Security Operations, Cyber Defense, or Incident Response
• •Proven experience working with MDR/SOC providers
• •Strong knowledge of SIEM, SOAR, EDR/XDR, and Vulnerability management solutions
• •Hands-on experience in investigating and responding to security incidents
• •Solid understanding of attack techniques (MITRE ATT&CK), threat intelligence, and defense strategies
• •Ability to write/run detection rules and create operational playbooks
• •Excellent communication skills in German and English

Tasks

• •Act as the primary contact for the MDR provider
• •Manage daily operations and service delivery
• •Review, triage, and validate alerts and incidents
• •Drive continuous improvement in detection and response
• •Develop and maintain SOC processes, runbooks, and playbooks
• •Perform initial incident analysis and containment coordination
• •Handover incidents to IT or business stakeholders
• •Lead post-incident reviews and lessons-learned exercises
• •Manage and tune SIEM/SOAR use cases and integrations
• •Establish KPIs and metrics for SOC effectiveness
• •Collaborate with IT, OT, and business teams to enhance monitoring coverage
• •Support the CISO in developing the in-house SOC roadmap
• •Mentor and train future SOC analysts as the team grows

Benefits