Security Incident Detection & Response Expert (m/w/d) Number: KUBUS00125 About kubus IT With over 700 employees, we ensure IT operation for 17,000 AOK users in the federal states of Bavaria, Saxony and Thuringia. Our range of services ranges from complete operation of technical systems, application support and support to consulting and development. Our values are lived safely, flexibly and innovatively and the concerns of our customers are handled individually.

As a Security Incident Detection & Response Expert of kubus IT, you take on a deep professional role in the Cyber Defense Center (CDC) and support the CDC staff as a central 3rd-level contact partner in complex issues related to Security Incident Detection and Response. You analyze sophisticated security incidents, attack patterns and vulnerabilities in complex IT environments and support Security Incident Analysts in evaluating, prioritizing, and professional classification of security-relevant events. You create technical specifications, technical designs and decision templates for detection and response scenarios and translate current threat situations into concrete requirements for use cases, detection rules, playbooks and technical protection measures. You operate active Threat Hunting and help to improve existing detections and identify threats proactively. You develop existing detection-use-cases professionally, evaluate their effectiveness and quality and support the optimization of recognition in modern security technologies such as SIEM, EDR, SOAR and cloud security solutions. You identify potential improvements in the Security Incident Detection and Security Incident Response processes and actively promote the development of the holistic Security Incident Management. You actively pass on your expert knowledge to the CDC employees, support professional quality assurance and contribute through reviews, guidelines and technical recommendations to continuously improve the operational detection and response capabilities. For new or less experienced employees, you are mentor and coach and help develop an effective Security Incident Management Team

You have a completed university degree in the field of computer science or comparable knowledge (e.g. BA degree in IT, training degree) associated with multiannual professional experience. You speak very well German (at least C1 level) You bring profound experience with security technologies such as SIEM, E/XDR, SOAR, Threat intelligence platforms or cloud security solutions. You know common attack and defence frameworks, in particular MITRE ATT&CK and D3FEND, and can derive practical detection and response requests from them. You have profound knowledge in all and deep knowledge in at least 2 of the following domains: Operating systems and operating system related technologies (Windows and Linux) Digital forensics and evidence protection, especially in the coordination of external forensics service providers and the understanding of expert opinions Network and protocols, in particular network-based attack methods Penetration Testing (mobile, app or web) Detection, analysis and processing of (complex) Security Incidents Cyber Threat Intelligence (CTI) and threat-based recognition rules Threat Hunting Common regulatory standards and guidelines (e.g. NIS2, ISO27001, NIST CSF, BSI Grundschutz, IT-S You are strong in communication and continue to form independently. You think and act analytically, work independently and responsibly. You reliably hold appointments and occasionally take on call readiness. You have a passenger car license and are also ready for multi-day business trips.

Benefits like: Unlimited employment contract with a large, prestigious statutory health insurance (AOK Bayern or AOK PLUS, depending on the place of service) Flexible working hours with sliding time account - no core working time. Work possible at all locations of kubus IT (Sachsen, Thüringen and Bayern) Possibility of mobile work (home office, close to AOK sites) at up to 3 to 4 days a week Remuneration according to the Federal Employment Agreement AOK/Neu (admission according to a reasonable professional experience with compensation group 10 from approx. 71,000 euros gross/year, ascent after incorporation into compensation group 11 from approx. 79,000 euros gross/year). Additional social supplements for married and parents 30 days holiday + 24.12. & 31.12. Christmas special payments (13th monthly salary). Employer subsidy for health promotion. Occupational pensions. Equipment with service notebook and smartphone Reduced Germany Job Ticket. Corporate Benefits (employee discount). Various training opportunities within working hours Disabled applicants are preferably taken into account with the same suitability. .