Security Engineer (m/f/d)

You design, implement and optimise powerful IT security solutions in the areas of detection, mitigation and remediation and continuously develop these You are responsible for the stable operation and the strategic development of our security platforms, in particular in the fields of SIEM, Network Detection & Response (NDR) and Vulnerability Management You analyze, evaluate and process IT security incidents in close cooperation with the departments and our external Security Operations Center (SOC) You validate SOC's security-relevant messages, evaluate their criticality and guide appropriate measures to contain and eliminate them You consistently develop our vulnerability management into a modern, risk-based Exposure Management You perform Threat Modelling for existing and new IT landscapes and support in identifying, evaluating and prioritizing security risks You develop technical security concepts and implement measures to meet regulatory and internal governance requirements You support the further development of IT security policies, standards and processes and introduce your technical expertise in governance issues You actively work in the Computer Emergency Response Team (CERT) of the Dr. Güldener Group and assists in the analysis, coordination and management of safety-relevant events You are testing current threats, assessing new methods of attack and taking appropriate measures to continuously improve our safety level You work closely with internal and external stakeholders and provide advice on security-relevant issues You are generally willing to participate in a call to secure IT security

You have well-founded knowledge of modern IT security practices and technologies and know how effective security measures are designed, implemented and continuously developed. You have a solid understanding of common network protocols such as DNS, HTTP, TLS, IP, TCP and UDP You'll bring profound experience in the analysis and evaluation of security-relevant events and in dealing with security incidents You work structured, independent and solution-oriented and convince by a strong team and communication skills You are able to prepare and understand complex technical issues in a way that is addressable Ideally, you have knowledge and practical experience in IT risk management as well as in IT governance processes Experiences with modern cloud architectures and their basic security requirements are of advantage You have already gained 3 to 5 years of professional experience in the field of IT security, building sound practical knowledge in one or more relevant security fields

Training Company laptop Occupational pension Job ticket Corporate Benefits Company doctor Health measures Sports and fitness services Flexible working hours Hybrid work: 1 day office, 4 days Home Office Family service Jobrad Public transport costs Fruit basket & Friday breakfast