Security Operations Center Specialist (m/f/x)

Liebherr Group; Kirchdorf an der Iller; Hybrid; EUR 55.000 - 80.000; Vollzeit

Benefits dieser Stelle

Attractive remuneration and social benefits

Flexible and hybrid working

Company pension scheme

Unique individual development and training opportunities

Employee benefits & discounts

Bicycle leasing through salary conversion

Company health management programme

Zusammenfassung

Liebherr Group is looking for a cybersecurity professional to join their team in Kirchdorf an der Iller. This role involves building use cases and configuring security tools, participating in Security Operations, and contributing to incident response processes.

Ideal candidates should have a Bachelor’s or Master’s degree in Cybersecurity or Computer Science, along with 3+ years of relevant experience. The position offers a hybrid work model and attractive benefits including pension schemes and individual development opportunities.

Qualifikationen

• 3+ years of cybersecurity experience.
• Security Certifications are an advantage (CISSP, SANS 450+, OSCP).
• Knowledge of cybersecurity frameworks (e.g. ISO27001, NIST).

Aufgaben

• Build use cases and configure security tools to detect security events.
• Participate in Security Operations and alert monitoring.
• Assist in coordinating global containment and recovery.

Kenntnisse

Experience with SIEM systems

Scripting languages (Python, PowerShell)

Good command of the English language

Good communication skills

Ausbildung

Bachelor’s or Master’s degree in Cybersecurity or Computer Science

Tools

Microsoft Sentinel

Splunk

Jobbeschreibung

At Liebherr-IT Services GmbH, we value the development of individual and entrepreneurial needs and therefore live the flex office: We work in a hybrid model with flexible working hours - both on site and mobile.

Creating passion: your responsibilities

• Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents
• Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations
• Assist in coordinating global containment, eradication, and recovery
• Contribute to refining incident response processes and tools
• Configure and manage Microsoft Sentinel, including data connectors, KQL queries, analytics rules, workbooks, log sources
• Support the onboarding and integration of various log sources, as well as administration of SOC infrastructure as needed
• Support the build of runbooks, continuous improvement and SOC reporting as needed

Contributing your strengths: your qualifications

Required qualifications:

• A Bachelor’s or Master’s degree in Cybersecurity, Computer Science, or related field, or otherwise justifiable experience
• 3+ years in cybersecurity, or proven relevant experience
• Good command of the English language (spoken, written) is required, German and French are a plus
• Good communication skills to work in an international hybrid team

Advantageous:

• Demonstrable Experience with SIEM systems (Microsoft Sentinel, Splunk) & SOAR platforms
• Proficiency in scripting languages (Python, PowerShell)
• Security Certifications are an advantage (CISSP, SANS 450+, Blue Team LVL x, OSCP, etc)
• Knowledge of cybersecurity frameworks and standards (e.g. ISO27001, NIST) is advantageous
• Advanced knowledge of security monitoring methodologies
• Incident management experience
• Good knowledge of MITRE ATT&CK Framework

Our commitment to you: your benefits

• Attractive remuneration and social benefits
• Flexible and hybrid working
• Freedom for creative work
• Company pension scheme
• Crisis-proof workplace
• Individual development and training opportunities
• Employee benefits & discounts
• Bicycle leasing through salary conversion
• Healthy & regional catering in the company restaurant
• Company health management programme
• EGYM Wellpass