Job
- Level
- Senior
- Job Field
- IT, Security
- Employment Type
- Part Time/Full Time
- Contract Type
- Permanent employment
- Location
- Essen
- Working Model
- Hybrid, Onsite
Job Summary
In this role, you handle IT security incidents, analyze complex attacks, develop and evaluate security concepts, and conduct penetration tests and threat emulations to enhance our clients' security posture.
Job Technologies
Your role in the team
- You are part of our Cyber Security & Reaction Service Team and support national and international clients in professionally managing IT security and compliance incidents — independently, systematically, and effectively.
- You are responsible for incident handling of security incidents (DFIR cases) in critical situations: from independent analysis and reconstruction of complex attacks along the kill chain to deriving robust measures for containment and hardening.
- You develop and evaluate detection and response concepts (SIEM, EDR/XDR, SOAR), conduct security, compromise, and incident readiness assessments, and specifically address security gaps in processes and technologies.
- You conduct penetration tests as well as adversary operations (Red/Purple Teaming, Threat Emulation according to MITRE ATT&CK) to simulate real attacker tactics and measurably improve detection and response capabilities.
- You act as a technical consultant and project manager, working closely with client-side SOC, IT, and management teams, contributing your expertise to the development of services, concepts, and court-admissible reports, and presenting results appropriately for the audience - from technical deep dives to executive summaries.
This text has been machine translated. Show original
Our expectations of you
Education
- Completed university degree in STEM with a focus on IT security/digital forensics or a comparable field with several years of relevant practical experience.
Qualifications
- Verifiable professional qualification in the DFIR environment, e.g., as a BSI-certified incident response expert, complemented by recognized certifications such as GCFE, GNFA, GCIH, or comparable qualifications.
- Independent, structured, and responsible work approach with a high level of team and customer orientation, enjoyment of collaboration and knowledge transfer, as well as a confident demeanor — even in time-critical situations.
- Strong analytical thinking skills and the ability to distill complex technical issues and communicate them effectively across different levels of hierarchy.
- Excellent spoken and written English skills, as well as willingness to undertake domestic and international business trips within the scope of customer projects and DFIR deployments.
Experience
- Solid knowledge of network technologies and operating systems, as well as several years of practical experience in Digital Forensics & Incident Response (DFIR) and related security disciplines (e.g., Threat Hunting, SIEM, SOC/CSIRT, EDR/XDR, Red/Purple Teaming), along with a good understanding of attack and defense models such as MITRE ATT&CK or Kill Chain.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Topics that you deal with on the job
Job Locations
This is your employer
TÜV Informationstechnik GmbH
Checked and certified by TÜV – what applies to cars, machines, plants or buildings is also offered by TÜViT as part of the TÜV NORD GROUP for your IT: for hardware, application systems, infrastructures, products, processes or software. The TÜV seal and certificates indicate to your customers that they can rely on these products and services.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Internet, IT, Telecommunication
Senior Cyber Security Expert
- Location
- Essen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
