System Administrator for EDR and SIEM (m/f/d)

The municipal data center Niederrhein (KRZN) is one of the ten largest municipal IT service providers in Germany. We provide more than 18,000 office jobs in the Council houses and county administrations at the Lower Rhine and in the Rhineland with every form of municipal information technology. System Administrator (m/w/d) for EDR and SIEM in full time (39 hours/week). The place to be occupied is generally suitable for parttime workers. The employment is first terminated for 5 years.

You are used as a system administrator (m/w/d) in the field of technical IT security of the KRZN, especially for Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM), at our site in Kamp-Lintfort and on request in the home office. You are responsible for the design, development and safe operation of the central EDR and SIEM infrastructure, including the integration of log sources, the construction of use cases for security monitoring, alarming and support in the Incident Response process.

In addition, you have the following tasks: Responsibility for operation, scaling and optimization of EDR and SIEM infrastructure and their data pipelines Ensuring correct and complete detection, correlation and analysis of safety-relevant event data Close cooperation with firewalling, network technology and information security in the development of detection and reaction mechanisms on security incidents Coordination and coordination with system, network and application managers to integrate new data sources into the EDR and SIEM infrastructure Further development of the automation of analysis and reporting processes in the SIEM environment Implementation of talks with users and customers and participation in the creation and contract management, internal coordination and establishment of communication and escalation processes as well as with users and customers Planning and coordination of necessary hardware and software acquisitions in the field of EDR/SIEM and budget planning and participation in the annual budget requirement Support in the creation of safety and operating concepts and participation in audits and certifications (e.g. BSI IT-Grundschutz, ISO 27001) Special assignments are made in agreement with the product area management

You have a (special) degree in the field of computer science, business management, public service/administration, e-government or the like, or a completed vocational training as a specialist in the field of system integration or comparable qualifications, as well as experience in consulting and supporting modern applications and IT infrastructures You have relevant knowledge in the care and administration of IT systems, in particular with regard to client/server architectures, network technologies and server operating systems In addition, you have professional experience in the administration of IT security facilities (e.g. firewalls, EDR or SIEM systems) Ideally, you also have practical knowledge of the network area (LAN/WAN) In addition to your specialist expertise, you will bring a solution-oriented, analytical and independent work that you can fully develop with us. You can rely on you as a team member at any time; the introduction of own initiative, independent work and sense of responsibility is of course for you, the cooperation in teams and with different people has a high priority for you Their distinctive communication skills and their organizational skills complete their profile We require a secure handling of MS-Office (Word, Excel and PowerPoint) and good German knowledge in word and font (at least certificate level C1) Nobody is perfect! You don't meet the requirements to 100% and still feel like the job? No problem – we go the way together as a team – including incorporation and tailor-made development measures!

Crisis-proof job with flexible working hours Relationship with old age provision Grouping up to Group 11 (TVöD-V, IT) free parking and charging facilities for e-cars and bikes extensive training offer We are a member of the company network ''Erfolgsfaktor Familie'' In principle, in the event of a corresponding probation, the agency offers the prospect of an increase grouping up to the EC 12 at a later stage. .