Identifying, assessing, remediating, and following up on security incidents, as well as communicating with affected stakeholders

Further developing existing processes and technologies to improve incident response activities

Continuously improving existing solutions (SIEM, SOAR, EDR, NDR) to detect and analyze cyber threats

Establishing a threat management framework and setting up a process for sharing information on threat scenarios and security incidents

Evaluating trends and new technologies for detecting and addressing cyber-attacks, and preparing decision-making documents for technology advancement

Developing and implementing security solutions to detect and remediate specialized cyber-attacks

Planning, conducting, and analyzing penetration tests to assess security levels and remediate critical vulnerabilities

Preparing threat landscape data and key metrics for reporting to relevant stakeholders

Identifying, evaluating, and implementing established technical solutions to leverage artificial intelligence within the context of cyber defense

Supporting threat hunting activities, particularly by expanding existing approaches and enhancing current capabilities

A degree in Computer Science, Business Informatics, or a comparable qualification

Expert knowledge in cybersecurity, with experience in threat/risk detection, forensic analysis, and prevention or mitigation (cybersecurity incident management)

Proficiency in using security intelligence and analytics tools, ideally within the context of an Information Security Management System (ISMS)

"Friendly hacking" skills, ideally backed by a certification such as Certified Ethical Hacker (CEH), CISSP, CISM, and/or CISA

Insight into CERT/SOC processes and communication channels, as well as automation (e.g., via Python)

A team-oriented mindset, a strong willingness to learn, a structured approach to work, and solid analytical and forensic skills

Business-fluent English is required; German language skills are an advantage