Information security expert with a focus on SIEM (m/f/d)

Our “Operative Security, Regulatorics, Cybersecurity” department aims to avoid cyber attacks and to identify as early as possible attacks in case of cases and to react as quickly as possible. The team, consisting of 9 colleagues, is responsible on the one hand for the activities around the SIEM and on the other hand for the processes on vulnerability management and penetration testing. The SIEM team serves the entire lifecycle, from threat analysis to incident repository. In your function as an expert for information security, you take the following tasks: Ensure the smooth and efficient operation of our SIEM solution. Manage cloud & hybrid environments: With your know-how you meet the challenges of our hybrid on-prem or Cloud environment (especially in Azure) and drive their safe development forward. Service providers control: In cooperation with our various external service providers, you ensure professional control and monitoring of all SIEM measures. analyse threats: Through sound threat analyses, you derive effective detection rules and take over the structured onboarding of relevant protocol data. Security events rate: When testing identified events, you will recognize attempts to attack early and initiate appropriate reaction measures. As a competent contact person, you support our specialist areas in safety-relevant issues and provide practical recommendations. Developing cyber defense: Developing together with your team Continue our Detection-&-Response capabilities and strengthen our entire security architecture.

You have completed their studies in the IT field. In addition, certifications or further training in the field of IT security expand your profile. Through your previous activities, you have gained extensive experience in information security, ideally with a clear focus on security monitoring. The construction and operation of a SIEM system is perfectly familiar to you and is one of your detectable practical strengths. A well-founded understanding of regulatory requirements and safety standards, such as DORA, BSI basic protection or ISO 2700x, will also help you. In addition, you can communicate safely in German (C1) and have good English skills (B2). You analyse complex security incidents sovereignly, make clear decisions and keep an overview of hybrid environments. In cooperation with different internal and external stakeholders, you are convinced by clear and address-oriented communication - both with internal stakeholders and in exchange with external service providers. A high self-initiative as well as the willingness to continually develop into new threats and technologies characterize your working understanding.

You can choose whether you want to work in Frankfurt or Munich Flexible working time design (guiding time model) incl. Home Office options (60% remote) Technical equipment for the home office (monitors, keyboard, mouse) Compensation for performance combined with attractive social benefits and benefits (including VL and BVV) 30 days of vacation & 25 days from outside the EU eGym Wellpass & Pflegeberatung ''aduna.care' Keep-in-Touch Program during Parental Period Targeted and individual further development possibilities Access to LinkedIn Learning Recommendation program ''employees' Granted food in our canteen Free Deutschlandticket & Bicycle leasing Bookable free parking