Job
In this role, you will develop detection scenarios for SIEM systems, lead project teams, and optimize security solutions to ensure effective cybersecurity measures in the Elastic domain.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Planning, design, and execution of implementations and commissioning with a focus on security, SIEM, and observability.
- Analysis and troubleshooting of issues as well as fault diagnosis in detection scenarios within SIEM systems (Content Engineering).
- Design, implementation, and optimization of detection scenarios in security analytics systems (such as Elastic SIEM).
- Management of complex assignments and projects, including resource planning, control and coordination of collaboration with the SOC provider, management of a project team of Content Engineers, as well as ensuring technical and temporal goal achievement.
- Definition, initiation, and control of measures to ensure service levels, security standards, and customer satisfaction.
- Development of strategic concepts for the specification and development of comprehensive solutions and specifications, particularly in the area of detection scenarios and security objectives, as well as holistic detection concepts.
- Technical support or leadership in acquisition processes, including feasibility analyses.
- Active involvement in the further development of the service and solution portfolio as well as the security solutions implemented at the customer site, particularly in the areas of Elastic Security, Observability, and Content Engineering.
Our expectations of you
Education
- Master's or diploma degree in Computer Science, IT Security, or a comparable qualification - alternatively, relevant verifiable professional experience.
Qualifications
- Very strong customer-oriented and entrepreneurial mindset, also in collaboration with management and C-level executives.
- High analytical and conceptual competence, especially in attack techniques and defense measures in the cybersecurity environment.
- Certifications in IT security or Elastic are an advantage.
- Excellent spoken and written proficiency in German and English.
Experience
- At least seven years of professional experience, including a minimum of five years in IT security, in areas such as Threat Detection, Content Engineering, SOC, or similar.
- Experience with SIEM and/or XDR systems (Palo Alto, Elastic, SPLUNK, etc.).
What we offer
- Mobile work nationwide in Germany.
- Attractive salary package with profit sharing.
- 37 hours/week with flexible working hours accounts.
- Employer-funded training and certifications.
- Another plus is our bicycle leasing, 30 days of vacation, subsidized Germany ticket, employer-funded retirement plan, asset-building benefits, group accident insurance for work and leisure, as well as employee discounts for many products of the Deutsche Telekom Group.
Benefits
Work-Life-Integration
Higher take-home pay
Topics you will work on
Job locations
About your employer
IT is your competent partner for all aspects of data center, network and application operations. As the leading ICT service provider in the German market, we guarantee long-term system support and availability of critical operating processes through our more than 800 highly qualified employees and an annual turnover of 120 million euros.
- 250+ Employees
- Established Company
- Onsite, Hybrid
- Internet, IT, Telecommunication
Employer reviews
- Engineering
- 3.0
- Team culture
- 3.5
- Career growth
- 3.4
- Working conditions
- 4.0
More jobs
These jobs might also interest you
The role As a Forward Deployed AI Engineer, you go directly into our specialist departments, understand the processes, and develop production-ready AI and automation solutions that will fundamentally change the way the entire GGW Group operates. You do...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
