Job
- Level
- Experienced
- Location
- Friedrichshafen
- Working Model
- Hybrid, Onsite
- Job Field
- IT, Security
- Employment Type
- Full Time
- Contract Type
- Permanent employment
Job Summary
In this role, you will configure the SIEM system, manage security incidents, optimize endpoint security, and develop automations for threat response while ensuring compliance with security standards.
Job Technologies
Your role in the team
- Build, configure and operate the SIEM system (Microsoft Sentinel or similar), including the integration of all relevant log sources (Entra ID, firewalls, servers, cloud).
- Manage and co-manage the external SOC/MDR service provider (24/7 monitoring, incident escalation, threat hunting).
- Operate and further develop endpoint security (Microsoft Defender for Endpoint, Intune compliance policies, Conditional Access).
- Plan and carry out BCM tests and restore drills (including the use of dedicated test hardware).
- Act as the point of contact for external and internal audits as well as certifications in the area of information security.
- Administer and optimise firewall rules, Secure Web Gateway, PAM (Entra PIM) and bastion access (Windows 365).
- Build SOAR playbooks to automate incident-response processes.
- Beraten Sie die Entwicklungsteams in Bezug auf sichere Softwareentwicklung, Secret-Scanning und Code-Signierung.
- Contribute to the Security Committee (KPIs, vulnerability management, dashboards, strategic decisions).
This text has been machine translated. Show original
Our expectations of you
Qualifications
- Sound knowledge of SIEM operations (ideally Microsoft Sentinel / Azure Monitor).
- Knowledge of the Microsoft 365 E5 security stack (Defender, Intune, Entra ID, Conditional Access).
- Gutes Wissen im Bereich Netzwerksicherheit (Firewalls, VPN, Segmentierung).
- A structured and self-directed way of working.
- Sehr gute Deutsch- und Englischkenntnisse.
- Knowledge of SOAR platforms and playbook automation.
- Zertifizierungen wie CompTIA Security+, CISSP, CEH, SC-200 oder vergleichbare.
- Knowledge of container security (Kubernetes, Docker).
Experience
- At least 3-5 years of professional experience in IT security operations or a comparable role.
- Experience with Endpoint Detection & Response (EDR), vulnerability management and incident response.
- Experience with business continuity management and disaster recovery testing.
- Experience with cloud security (Azure, AWS) and CIS hardening.
- Experience in regulated environments (financial sector, ISO 27001).
This text has been machine translated. Show original
What we offer
- Flexible working hours (flexitime and no core working hours).
- A great working atmosphere and a motivated team.
- Home-office options to help you balance work and family life.
- The opportunity to work from abroad temporarily through our worldwide workation program.
- A personal mentor and individual development opportunities, such as training courses, specialist seminars and trade fairs.
- Modern workplaces with attractive benefits, including team events, free drinks, fresh fruit, an ice cream freezer in summer and much more.
- 30 days of annual leave based on a five-day working week, allowing you to recharge.
- Mitarbeiterrabatte über das Corporate-Benefits-Portal.
- Betriebliche Altersvorsorge.
- Company health insurance and access to a company doctor.
- Sports program through EGYM Wellpass and a company bike through bike leasing.
- A permanent employment contract.
This text has been machine translated. Show original
Benefits
Work-Life-Integration
Health, Fitness & Fun
Topics You Will Work On
Job Locations
About Your Employer
ACTICO GmbH
ACTICO ist ein international führender Anbieter von Software für die intelligente Automatisierung und digitale Entscheidungsfindung. Das Unternehmen bietet erstklassige Software und Tools, die in verschiedenen Branchen eingesetzt werden und die die täglichen Entscheidungen und die End-to-End-Automatisierung verbessern.
Description
- Company Type
- Established Company
- Working Model
- Hybrid, Onsite
- Industry
- Electronics, Automatization, Internet, IT, Telecommunication
Operational Security Engineer
- Location
- Friedrichshafen
- Working Model
- Hybrid, Onsite
- Diversity
- Open for all genders
