Team Lead - Monitoring(m/w/x)

In this role, you will lead a team of Security Analysts, combining technical expertise with strategic leadership to enhance the organization's cybersecurity posture. Day-to-day responsibilities include mentoring the team, coordinating incident responses, and driving improvements in threat detection and operational efficiency.

Anforderungen

• •7–10+ years in SOC/IR/Threat Hunting/Detection Engineering with proven Tier 3 leadership experience
• •Demonstrable expertise in SIEM (e.g., Microsoft Sentinel/Splunk), EDR/XDR (e.g., Defender, CrowdStrike), and SOAR technologies
• •Strong forensics & incident response skills across multiple environments (Windows/*nix, identity attacks, cloud, lateral movement)
• •Experience with MITRE ATT&CK framework, threat modelling, purple teaming, and hypothesis-driven hunts
• •Scripting proficiency for detections/automation (KQL, PowerShell, Python) and IaC/CI for content lifecycle management
• •Experience with cloud security monitoring (Azure/M365/AWS)
• •Expertise in identity security (Entra ID / AAD) and email security
• •Knowledge of log pipelines, data normalization, and schema (e.g., ASIM/OSSEM/EC)
• •Certifications in relevant cybersecurity domains (CISSP, SANS, etc.)
• •Experience working in financial services or regulated industries