Cyber Defense Expert (m/f/d)

You are part of thyssenkrupp's CERT and support group-wide in identifying and investigating IT security incidents You support affected business areas in the analysis, evaluation, processing and solution of Cyber Security Incidents and communicate techniques and measures to protect them Identify and process IT security incidents across all phases of the Incident Response process and carry out further analyses with regard to malware, traffic, log data and attacker profiles Answering various requests via ticket system and hotline as well as the assessment (triage) and handling of alarms is your responsibility Your focus is on the analysis, evaluation and processing of incidents in Microsoft Sentinel, including work in the associated Microsoft Security Portal, as well as on the detailed investigation and evaluation of security-relevant events using KQL You provide results as well as other technical content to non-technical interlocutors and are in regular contact with contact persons at various levels You proactively inform yourself about relevant new technologies and continuously adapt your knowledge to technical progress

You have a successfully completed study of computer science or comparable training with a focus on IT security You bring several years of professional experience in operational IT security / SOC / CERT as well as knowledge about cyber attack techniques and strategies to limit damage and have experience with independent analysis and processing of complex IT security incidents You will also have deeper knowledge in the areas of networks, IT infrastructures and operating systems (Windows and Linux) focusing on Threat Hunting To do this, you can use recognized tools such as Velociraptor, Splunk, Microsoft Defender and Sentinel You have a well-founded knowledge of the development of complex KQL queries for incident investigation and Advanced Threat Hunting and possibly even additional industry standard certifications such as: GCIA, GCIH, GCTI, GREM, GRID, GCED, GCTD, Mandiant Practical Threat Hunting You communicate fluently in German and English (in word and writing)

For us it is self-evident to offer you optimal framework conditions. These include: A dynamic, international working environment with attractive working conditions and social benefits Flexible working hours, an optimal balance between professional and private life and a variety of health promotion programmes Numerous individual, professional and personal development opportunities and global career opportunities Collaborative cooperation and respect in dealing with each other – you can find it with us for more than 200 years. If this is as important to you as us, apply now!

We value diversity

We value diversity and therefore welcome all applications – regardless of gender, nationality, ethnic and social origin, religion/worldview, disability, age as well as sexual orientation and identity. .