Job
In this role, you lead complex security incidents, develop incident response strategies, evaluate security systems, and support 24/7 monitoring in the Security Operations Center.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As a Senior Cyber Security Analyst, you will lead the response to complex security incidents in our co-managed Security Operations Center and serve as the primary escalation point for our external SOC partner (MSSP).
- You work in an environment of particular societal and regulatory significance.
- As part of critical infrastructure (KRITIS/NIS2), your work directly contributes to security of supply and has an impact far beyond your own team.
- Security Monitoring & XDR/SIEM Operations: technical assessment and quality assurance of 24/7 monitoring by our MSSP partner, as well as contributing to the design of XDR/SIEM operating processes with the Security Platform Engineering team.
- Alert Triage & Investigation: Handling complex Tier 2/3 escalations, including in-depth analysis of severity and impact.
- Incident Response: technical leadership and coordination of complex incidents, including collaboration with our external forensics/IR retainer during major incidents.
- Threat Hunting & Threat Intelligence: proactive, hypothesis-driven searches for advanced threats, as well as contextualizing and prioritizing relevant findings for our system landscape.
- Detection Engineering & Automation: Subject-matter input to optimize detection use cases and further develop automated response processes (SOAR) in collaboration with Security Engineering.
- Vulnerability Management: Assessing technical vulnerabilities and initiating remediation measures in coordination with the affected teams.
- Mentoring & Knowledge Sharing: Supporting analysts and structured knowledge exchange with our MSSP partner.
- On-call duty: Participate in on-call rotations for escalations in accordance with applicable operational requirements.
Our expectations of you
Education
- Completed degree in computer science, equivalent training, or relevant professional experience in cybersecurity/IT security; certifications (e.g., GCIH, GCFA, CySA+) are an advantage.
Qualifications
- Good understanding of networking technologies, operating systems (especially Linux), and advanced security concepts (MITRE ATT&CK, Cyber Kill Chain).
- Knowledge of scripting languages (e.g., Python, PowerShell) to automate analysis and response steps.
- Team-oriented, structured approach to work and the ability to perform well under pressure, even when working to tight deadlines.
- Very good German skills and good written and spoken English skills.
Experience
- Several years (typically 4+ years) of hands-on experience in a Security Operations Center, preferably in a Tier 2/3 role or as an Incident Responder.
- Experience independently analyzing and handling complex security incidents, as well as confidently working with SIEM and EDR solutions.
- Experience with cloud environments (Azure/AWS/GCP) and their security assessment.
- Experience in assessing technical vulnerabilities or in vulnerability management is an advantage.
- Experience working with external managed security service providers is an advantage.
What we offer
- Work environment – Mobile work model and home office options with appropriate IT equipment, as well as flexible working hours and lunch options at our locations.
- Financial support – Attractive benefits such as childcare subsidies, company pension plans, travel allowances, and reimbursement of bank account fees.
- Work-life balance – advice and support on topics such as health, family, working life and crises, as well as company sports programs and preventive healthcare; 30 days of vacation.
- Professional development – Individual support and training opportunities for employees at the PŸUR Training Academy.
- Employee discounts – Corporate benefits at renowned companies via benefits portals, with attractive offers from leading partners, brands and events, as well as a subsidy for PŸUR products.
- Mobility – Good public transport connections and free parking for employees.
- Atmosphere – team spirit and an open environment where you can make the most of your ideas, potential and strengths, an informal first-name culture, and initiatives on sustainability topics such as climate protection.
Benefits
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Tele Columbus AG, one of the leading fiber optic network providers in Germany, offers high-speed internet and more than 250 TV channels on a digital entertainment platform. This platform combines traditional television with video on demand, making it the perfect entertainment solution for the whole family
- 50-249 Employees
- Established Company
- Full Remote, Hybrid, Onsite
- Industry, Production
More jobs
These jobs might also interest you
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
