IT-Security Engineer (Security Operations Center – SOC) (m/f/d)

At the HAWK Hildesheim/Holzminden/Göttingen University of Applied Sciences, the following temporary position up to 30.04.2027 is to be placed in the central IT facility at the Hildesheim site:

IT-Security Engineer (m/w/d) (E12 TV-L, full time) The enrolled site is located in the context of the construction and prototypical testing of a high-school security operation center (SOC) in Lower Saxony. The focus of the activity is on connecting a first pilot university to the SOC.

Analysis, development and connection of relevant log sources of a university (e.g. servers, network components, security solutions, applications) Deployment, configuration and operation of log and security agents on target systems of the affiliated university Integration of log data into central analysis and monitoring systems (e.g. SIEM/XDR) Support in the development and testing of events detection, analysis and incident response processes Technical coordination with local IT teams at the pilot university and with the supported SOC team Documentation of technical implementation, gained findings and best practices as a basis for the subsequent integration of further universities Advising local administrators in curing their systems and selecting relevant audit policies Assessment of security events in the context of current threats (e.g. CVEs, exploits, campaigns) Working in multi-level working groups and voting formats

Completed academic studies in the fields of computer science, IT security, business informatics or comparable qualifications Practical experience in IT security or IT operations, ideally related to log management or SIEM Routinized handling of common operating systems (Linux, Windows) as well as basic network and protocol knowledge Structured and independent operation Good communication skills and team spirit for multidisciplinary team work Remarkable Experiences in the SOC environment, Incident Response or Security Monitoring Knowledge of safety standards and frameworks (e.g. BSI, ISO 27001, MITRE ATT&CK) Experiences with automation or scripting (e.g. Bash, Python, PowerShell)

Working in an innovative, multi-school IT security project with pilot character Flexible working hours and possibilities for mobile work Extensive possibilities for further professional qualification in the field of IT security

As a multi-faceted university, we also want employees who bring different backgrounds to life. Therefore, people from underrepresented groups are particularly encouraged to apply. Our university promotes the reconciliation of family and occupation, among other things, through very flexible working time models. The Equality Office and the Staff Council will be happy to provide information on these issues. Persons with severe disability are preferably taken into account with the same suitability, competence and professional performance in accordance with the relevant regulations. In order to safeguard your interests, please inform us in the application whether a severe disability/ The same is true. .