Head of Cyber Defense Center(m/w/x)

Requirements

• Advanced degree in Cyber Security, Information Technology, Information Security, Computer Science, Security Engineering, Digital Forensics, or related discipline (Bachelor’s/Master’s) or equivalent education/experience
• Proven professional experience in cyber security operations, incident response, threat detection, SOC/CSIRT, or threat intelligence in senior/leadership roles across global organizations
• Relevant information security certifications (e.g., CISSP, CISM)
• Proven track record in defining/executing cyber defence strategies and building defence-in-depth models
• Extensive hands-on leadership in global SOC operations (SIEM, SOAR, EDR/XDR ecosystems, detection engineering, alert management, triaging, containment, incident management)
• Skill in establishing incident response playbooks, orchestrating incident/crisis management, and driving post-incident learning
• Hands-on experience architecting/operating integrated cyber defence platforms (intelligence, monitoring, automation, response)
• Experience leading international/global security operations/engineering teams, with track record in strategic planning, team development, operational excellence

Tasks

• Lead the global Cyber Defense Center.
• Establish and improve cyber defense capabilities.
• Define and execute the Cyber Defense Strategy.
• Align cyber strategy with overall architecture.
• Establish a defense-in-depth operating model.
• Integrate preventive, detective, and responsive controls.
• Lead a global team functionally and disciplinarily.
• Foster collaboration, innovation, and accountability.
• Develop a high-performing global team.
• Provide clear direction and mentorship.
• Offer professional growth opportunities.
• Promote an inclusive and empowering environment.
• Act as a role model for ZEISS values.
• Drive engagement and motivation.
• Cultivate strong stakeholder relationships.
• Lead global SOC operations.
• Manage detection engineering, monitoring, and triaging.
• Oversee SOC tools like SIEM, SOAR, EDR/XDR.
• Advance SOC tool landscape and infrastructure.
• Leverage automation potentials for SOC.
• Drive organizational readiness for incident response.
• Manage incident detection, classification, and containment.
• Oversee incident eradication and recovery.
• Collaborate with stakeholders on incident response.
• Conduct post-incident reviews.
• Drive measurable posture improvements.
• Establish and mature a threat intelligence program.
• Track relevant threat actors, tactics, and techniques.
• Contextualize intelligence with industry and assets.
• Integrate threat intelligence into cyber operations.
• Share threat intelligence with stakeholders.
• Integrate offensive security and digital forensics.
• Challenge policy compliance and defense capabilities.
• Standardize forensic efforts via consumable services.
• Drive advanced forensic capabilities.
• Uncover root causes through forensics.
• Strengthen evidence-based learning.
• Prevent recurrence of incidents.
• Integrate intelligence and monitoring into the Cyber Defense Platform.
• Ensure continuous improvement of the defense ecosystem.
• Optimize tooling, integration, and operational excellence.

Work Experience

Education

Languages

Tools & Technologies