Operational Security Engineer

ACTICO GmbH

Job

In this role, you will configure the SIEM system, manage security incidents, optimize endpoint security, and develop automations for threat response while ensuring compliance with security standards.

Job summary

This listing has been machine translated. Show original

Job technologies

Your role in the team

  • Build, configure and operate the SIEM system (Microsoft Sentinel or similar), including the integration of all relevant log sources (Entra ID, firewalls, servers, cloud).
  • Manage and co-manage the external SOC/MDR service provider (24/7 monitoring, incident escalation, threat hunting).
  • Operate and further develop endpoint security (Microsoft Defender for Endpoint, Intune compliance policies, Conditional Access).
  • Plan and carry out BCM tests and restore drills (including the use of dedicated test hardware).
  • Act as the point of contact for external and internal audits as well as certifications in the area of information security.
  • Administer and optimise firewall rules, Secure Web Gateway, PAM (Entra PIM) and bastion access (Windows 365).
  • Build SOAR playbooks to automate incident-response processes.
  • Beraten Sie die Entwicklungsteams in Bezug auf sichere Softwareentwicklung, Secret-Scanning und Code-Signierung.
  • Contribute to the Security Committee (KPIs, vulnerability management, dashboards, strategic decisions).

Our expectations of you

Qualifications

  • Sound knowledge of SIEM operations (ideally Microsoft Sentinel / Azure Monitor).
  • Knowledge of the Microsoft 365 E5 security stack (Defender, Intune, Entra ID, Conditional Access).
  • Gutes Wissen im Bereich Netzwerksicherheit (Firewalls, VPN, Segmentierung).
  • A structured and self-directed way of working.
  • Sehr gute Deutsch- und Englischkenntnisse.
  • Knowledge of SOAR platforms and playbook automation.
  • Zertifizierungen wie CompTIA Security+, CISSP, CEH, SC-200 oder vergleichbare.
  • Knowledge of container security (Kubernetes, Docker).

Experience

  • At least 3-5 years of professional experience in IT security operations or a comparable role.
  • Experience with Endpoint Detection & Response (EDR), vulnerability management and incident response.
  • Experience with business continuity management and disaster recovery testing.
  • Experience with cloud security (Azure, AWS) and CIS hardening.
  • Experience in regulated environments (financial sector, ISO 27001).

What we offer

  • Flexible working hours (flexitime and no core working hours).
  • A great working atmosphere and a motivated team.
  • Home-office options to help you balance work and family life.
  • The opportunity to work from abroad temporarily through our worldwide workation program.
  • A personal mentor and individual development opportunities, such as training courses, specialist seminars and trade fairs.
  • Modern workplaces with attractive benefits, including team events, free drinks, fresh fruit, an ice cream freezer in summer and much more.
  • 30 days of annual leave based on a five-day working week, allowing you to recharge.
  • Mitarbeiterrabatte über das Corporate-Benefits-Portal.
  • Betriebliche Altersvorsorge.
  • Company health insurance and access to a company doctor.
  • Sports program through EGYM Wellpass and a company bike through bike leasing.
  • A permanent employment contract.

Benefits

Health, fitness & fun

Topics you will work on

Job locations

Map of the job locations
© OpenMapTiles, © OpenStreetMap contributors
  • Location Friedrichshafen
    Baden-Württemberg, Germany

About your employer

ACTICO ist ein international führender Anbieter von Software für die intelligente Automatisierung und digitale Entscheidungsfindung. Das Unternehmen bietet erstklassige Software und Tools, die in verschiedenen Branchen eingesetzt werden und die die täglichen Entscheidungen und die End-to-End-Automatisierung verbessern.

Company type
Established Company
Work model
Onsite, Hybrid
Industry
Electronics, Automatization · Internet, IT, Telecommunication
  • Öko-Institut Consult gGmbHFreiburg im Breisgau, Berlin

    • Easy Apply
    • Hybrid
    • Onsite
    • Part Time/Full Time

    Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...

    • TCP/IP
    • Active Directory
    • Windows
    • Microsoft Exchange
    • Office 365
    • Linux
    • VLAN
    • +4
  • Max-Planck-Institut für Intelligente SystemeStuttgart, Stuttgart

    • Onsite
    • Full Time
    • Lead

    Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...

    • Mac OS
    • Windows
    • Linux
  • Tröger & Cie. AktiengesellschaftNuremberg, Regensburg, Bayreuth

    • Easy Apply
    • Hybrid
    • Onsite
    • Full Time

    Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...

    • Ethernet
    • C
    • Git
    • Python
    • Bash
    • Linux
    • C++
    • CAN
    • J1939
    • +4
    • +5

Operational Security Engineer

ACTICO GmbH