Security Operations Engineer (f / m / d)

1&1 MAIL & MEDIA APPLICATIONS SE; Karlsruhe; Vor Ort; EUR 60.000 - 85.000; Vollzeit

Zusammenfassung

Join a leading digital company as a Security Operations Engineer, focusing on cybersecurity and incident response. You will innovate processes, lead incident management, and ensure continuous security coverage for our platforms. This dynamic role emphasizes collaboration and technical skill in a fast-paced environment.

Qualifikationen

• Experience in cybersecurity, specifically blue team operations.
• Familiarity with incident management and technical analysis.
• Ability to innovate and enhance security processes.

Aufgaben

• Design and improve processes and tools for cybersecurity operations.
• Triage security alerts and manage incidents effectively.
• Automate workflows and perform technical analyses.

Kenntnisse

Threat Hunting

Incident Response

Anomaly Detection

Vulnerability Management

Digital Forensics

Cyber Threat Intelligence

Tools

SIEM

EDR/XDR

Jobbeschreibung

Are you passionate about cybersecurity and blue team topics like threat hunting, anomaly detection, and incident response? Do you thrive in an agile environment and want to contribute to a leading digital company? Join us as a Security Operations Engineer and help secure our products: WEB.DE, GMX, and mail.com!

In this role, you will be at the heart of our operational security, with responsibilities including:

1. Innovate and Enhance: Design and continuously improve processes and tools in key areas such as SIEM, cyber threat intelligence, threat hunting, vulnerability management, and digital forensics to maintain a real-time understanding of our threat landscape.
2. Lead Incident Response: Triage security alerts and take the lead as Incident Manager during confirmed incidents, coordinating cross-functional teams under pressure.
3. Automate Workflows: Automate detection and response workflows using platforms like SIEM or EDR/XDR, as well as custom scripts and playbooks.
4. Technical Analysis: Perform in-depth technical analyses, including log analysis and digital forensics.
5. 24/7 Coverage: Participate in our on-call rotation to ensure continuous security coverage when needed.