Head of Security Operations Center (d/f/m)

Henkel; Düsseldorf; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Flexible work hours

Hybrid work model

Global wellbeing programs

Employee share plan

Pension plan

Preventive health insurance

Mobility options

Job summary

Henkel seeks a senior Cyber Security leader to manage the SOC for our dx unit in Germany. You will build and mentor a distributed team, drive incident response, and align with detection engineering to strengthen playbooks.

The role requires deep knowledge of NIST CSF, MITRE ATT&CK, ISO 27001 and NIS2, with hands-on Windows/Linux, automation, and AI-driven security. German is a plus; fluent English required.

Qualifications

• Master’s degree in Cyber Security or related field is preferred.
• 5+ years in Cyber Security with SOC, IR, cloud security, and hybrid IT/OT.
• Proven leadership of distributed security teams.
• Strong knowledge of NIST CSF, MITRE ATT&CK, ISO 27001 and NIS2.

Responsibilities

• Manage and continuously improve SOC performance with KPIs, SLAs, and metrics.
• Lead and develop a team of SOC analysts.
• Coordinate high-severity cyber security incident responses.

Skills

Leadership

Incident response

Cloud security

Security monitoring

Automation

Stakeholder management

AI-driven cybersecurity

English proficiency

Education

Master’s degree in Cyber Security

Computer Science

Engineering

Tools

Windows

Linux

Endpoint security

Vulnerability management

Python

PowerShell

Ansible

Job description

About this Position

What you´ll do

• Manage and continuously improve Security Operations Center (SOC) performance through defined KPIs, SLAs, and operational metrics in our Business Unit IT (dx).
• Lead and develop a team of SOC analysts, fostering a culture of collaboration, operational excellence, and continuous learning
• Lead the operational response and coordination of high-severity cyber security incidents
• Oversee SOC processes and identify opportunities for operational improvement, efficiency, and automation
• Align closely with the Detection Engineering team to enhance detection capabilities, automate response processes, and continuously improve playbooks
• Assess the impact of cyber security incidents within Henkel's environment and drive appropriate response and containment actions
• Serve as the subject matter expert for security monitoring, incident response, and cyber security investigations
• Provide regular reporting on security incidents, operational trends, and SOC performance to management

What makes you a good fit

• Master’s degree in Cyber Security (preferred), Computer Science, Engineering or a related field
• 5+ years of experience in Cyber Security, including Security Operations, Incident Response, Cloud Security and hybrid IT/OT environments
• Proven leadership experience managing and developing distributed teams of security professionals
• Strong knowledge of security frameworks and standards, including NIST CSF, MITRE ATT&CK, ISO 27001 and NIS2
• Broad technical expertise across Windows/Linux environments, endpoint security, vulnerability management, security monitoring, automation/scripting (e.g., Python, PowerShell, Ansible), paired with excellent stakeholder management and deep knowledge in AI-driven cybersecurity
• Fluent in English, German is a plus

Some perks of joining Henkel

• Flexible work scheme with flexible hours, hybrid work model, and work from anywhere policy for up to 30 days per year
• Diverse national and international growth opportunities
• Global wellbeing standards with health and preventive care programs
• Gender-neutral parental leave for a minimum of 8 weeks
• Employee Share Plan with voluntary investment and Henkel matching shares
• Company Pension Plan 100% financed by Henkel
• MEGA Preventive Health Insurance
• CareFlex Supplementary Care Insurance
• Mobility offer: My Henkel Bike and Jobticket

At Henkel, we come from a broad range of backgrounds, perspectives, and life experiences. We believe the uniqueness of all our employees is the power in us. Become part of the team and bring your uniqueness to us! We welcome all applications across different genders, origins, cultures, religions, sexual orientations, generations and disabilities. If there are any specific accommodations or adjustments you require for the interview process or your on-site appointment, please inform us, and we'll do our best to accommodate your requests.

Note: The email address you provide during the application process may also be used in later stages (e.g. for contract execution via digital tools). Please ensure that only you have access to this mailbox and that you can securely receive confidential information through it.