Senior Cyber Security Specialist – Detection & Incident Response (m/f/d)

You take on the technical responsibility for the detection, analysis and control of complex cyber attacks against our data center, cloud and hybrid infrastructures, process sophisticated security incidents and conduct technical deep-dive analyses, digital forensics as well as coordinated incident response measures. With a wide view, you will develop detection strategies, detection stories and Threat Hunting concepts along current attack patterns and frameworks such as MITRE ATT&CK and optimize use cases, correlations and automations within our SIEM, EDR, NDR and cloud security platforms. You evaluate threat situations based on Threat Intelligence, conduct appropriate protection, detection and reaction measures and control vulnerability, risk and exposure analyses, prioritizing risk, critique and corporate requirements. In addition, you take over the professional management of complex security incidents, coordinate internal and external stakeholders and advise specialist areas, IT teams and management on security-relevant risks and appropriate countermeasures. Last, but not least, drive forward the further development of security operations, attack detection, automation and threat-hunting, support audits, regulatory requirements and the further development of the security strategy and act as an escalation entity in critical security incidents as part of call readiness and layer models.

You have completed your studies in computer science or IT security, alternatively you come to us with a comparable qualification and relevant professional experience. For several years, you have been active in the SOC, Cyber Defense, Incident Response, Detection Engineering, Threat Hunting and/or Digital Forensics environment and are fit scripting, automation or the development of safety-relevant use cases. To this end, you have deep knowledge of modern attack and defence techniques as well as sound know-how in Azure or AWS and Container/Kubernetes-Security. You have a sound understanding of Windows, Linux, Cloud and Network Architectures and master the professional handling of SIEM, EDR, NDR, SOAR and Threat intelligence platforms; Certifications such as GCIH, GCFA, GCED, CISSP, CCD or CARTP are advantageous. You convince by high self-responsibility, strategic thinking and the ability to understand complex topics.

Create the energy future with us – and benefit from an employer who evaluates your performance and places your quality of life at the heart of it. TransnetBW expects you more than just a job – here you will find an environment that combines security, meaning and development. Excerpt from our employer services: Attractive remuneration with collective agreement, 38-hour week, Christmas and holiday money as well as participation Flexible working models with mobile work, home office options, fair flex time account, workation and more. Health promotion with medical and psychological offers, vaccinations and preventive examinations EGYM Wellpass Corporate fitness and operating sports groups Structured onboarding with personal “Buddy” for a successful start Various training offers for individual development Sustainable mobility offers such as job ticket, e-bike leasing and free parking