Security Operations Center Specialist

Jobtailor; Deutschland; Vor Ort; EUR 70.000 - 95.000; Vollzeit

Zusammenfassung

Jobtailor is seeking a senior Security Operations Center professional in Germany to monitor, detect, and respond to security incidents across the organization. You will work with a skilled team to analyze events, perform forensics when needed, and help maintain the security posture with continuous monitoring and improvement.

The role requires extensive SOC experience, TS/SCI clearance, and DoD 8140 compliant certifications like Security+.

Qualifikationen

• TS/SCI clearance required.
• 10+ years in security operations or SOC.
• Hands-on security monitoring, incident detection and response.
• Knowledge of cybersecurity principles, threat landscape and attack vectors.
• Familiarity with SIEM, IDS/IPS, antivirus, and EDR.
• Experience with incident response procedures and forensic analysis.
• Strong analytical and problem-solving skills; able to decide quickly under pressure.
• Excellent communication with team and stakeholders.
• DoD 8140 compliant certification such as CompTIA Security+.
• CISSP or CISM certifications are a plus.
• Knowledge of industry standards (NIST) and regulations (GDPR, HIPAA) is advantageous.
• Willingness to work a 24/7 rotational shift environment, including weekends and holidays.

Aufgaben

• Monitor security events and logs from network devices, servers, endpoints, and security tools.
• Identify and analyze potential security incidents and anomalies; investigate and elevate as required.
• Participate in incident response activities including containment, eradication, and recovery.
• Collaborate with incident response teams and IT staff to minimize impact and recurrence of incidents.
• Stay updated with latest cybersecurity threats and attack vectors.
• Analyze threat intelligence reports to proactively detect and respond to threats.
• Operate and maintain security tools such as SIEM, IDS/IPS, antivirus, and EDR.

Kenntnisse

Security monitoring

Incident detection

Incident response

Threat analysis

Analytical thinking

Communication

Decision making under pressure

Ausbildung

Bachelor's degree in a relevant field

Tools

SIEM

IDS/IPS

EDR

Antivirus

Jobbeschreibung

Responsibilities

• Monitor security events and incident logs from various sources, including network devices, servers, endpoints, and security tools.
• Identify and analyze potential security incidents and anomalies, taking appropriate actions to investigate and elevate as required.
• Participate in incident response activities, including containment, eradication, and recovery procedures.
• Work closely with incident response teams and IT staff to mitigate the impact of security incidents and minimize the risk of recurrence.
• Stay updated with the latest cybersecurity threats and attack vectors.
• Analyze threat intelligence reports to proactively detect and respond to emerging threats.
• Operate and maintain security tools such as SIEM, IDS/IPS, antivirus, and other security‑related solutions.
• Conduct in‑depth analysis of security incidents, perform digital forensics, and document findings for future reference and improvement.
• Prepare and submit detailed incident reports, including root‑cause analysis and recommended remediation actions, to senior management and stakeholders.
• Implement continuous monitoring processes to ensure ongoing visibility into the security posture of the organization.
• Perform regular audits of security controls and configurations.
• Collaborate with the security awareness team to provide input into security training materials and awareness campaigns for employees, enhancing the overall security culture.
• Ensure compliance with established security policies, standards, and procedures.
• Assist in the development and maintenance of security policies as necessary.
• Provide clear and concise shift handover reports to SOC colleagues, ensuring accurate communication of ongoing incidents and pertinent information.

Requirements

• Ability to maintain TS/SCI clearance
• 10+ years’ experience (Bachelor’s degree in relevant field may be substituted for 5 years of relevant experience)
• Proven experience in a Security Operations Center (SOC) or similar role, with hands‑on experience in security monitoring, incident detection, and response.
• In‑depth knowledge of cybersecurity principles, threat landscape, and attack vectors.
• Familiarity with security tools and technologies, such as SIEM, IDS/IPS, antivirus, and endpoint detection and response (EDR) systems.
• Understanding of incident response procedures and methodologies, including forensic analysis.
• Strong analytical and problem‑solving skills, with the ability to make quick decisions under pressure.
• Excellent communication skills to collaborate effectively with other team members, management, and external stakeholders.
• Required DoD 8140 compliant certification such as CompTIA Security+
• Other relevant cybersecurity certifications like Certified Information Systems Security Professional (CISSP), or Certified Information Security Manager (CISM), are a plus.
• Knowledge of industry compliance standards (e.g., NIST) and relevant regulations (e.g., GDPR, HIPAA) is advantageous.
• Willingness to work in a 24/7 rotational shift environment, including weekends and holidays.

Core Competencies

Demonstrates extensive experience in Security Operations Center (SOC) functions, including security monitoring, incident detection, and response. Proficient in utilizing security tools such as SIEM and IDS/IPS while ensuring compliance with industry standards and regulations.