Security Operations Engineering Consultant (m / w / d)

NVISO; München; Vor Ort; Vertraulich; Vollzeit

Zusammenfassung

A leading cyber security firm in Munich is seeking a Security Operations Engineering Consultant to contribute to SOC projects. Responsibilities include managing log onboarding, creating technical documentation, and advising on incident response. Applicants should have experience with SIEM technologies and good communication skills. A training budget and flexible work options are offered.

Leistungen

10,000 EUR training budget

30 days of vacation

Flexible working hours

Company bike leasing

Qualifikationen

• Eligible for NATO Clearance.
• At least two years of experience as a SOC Analyst.
• Strong interpersonal and communication skills required.

Aufgaben

• Contribute to various SOC projects as a subject matter expert.
• Plan and manage onboarding of new log sources.
• Create technical and process playbooks.

Kenntnisse

Azure Sentinel

Microsoft Security stack

SIEM technologies

SIEM query languages

YARA rules

log onboarding

detection engineering

Tools

Elastic

Splunk

LogPoint

Jobbeschreibung

Who are we?

NVISO protects European society from potentially devastating cyber attacks! We offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

Tasks

As a Security Operations Engineering Consultant (m / w / d) based in Germany you will contribute to various SOC projects as a subject matter expert. You have a good knowledge of SOC engineering concepts such as log onboarding, detection engineering, SIEM and MDR technologies. As an expert you play an advisory role, you also take ownership of the design and implementation of a variety of solutions for customers across different sectors.

Typical tasks include but are not limited to:

• Planning and managing the onboarding of new log sources, troubleshooting issues with log sources or systems with clients and vendors;
• Creating technical and process playbooks;
• Defining and setting up correlation rules, based on threat intelligence and specific customer requirements;
• Contributing to incident response procedures with your expert insights;
• Ensuring you remain up to speed with latest trends and technologies in the SOC field.

Requirements

• You are eligible for NATO Clearance;
• Expertise in Azure Sentinel and the Microsoft Security stack, and / or SIEM technologies such as Elastic, Splunk, LogPoint;
• Experience in fine‑tuning and setting up detection rules;
• Practical experience with SIEM query languages, and / or Sigma and YARA rules;
• Ideally, at least two years of experience as a SOC Analyst, enabling you to contribute to the development of playbooks and incident response procedures;

Soft Skills

• Ability to work independently, and keep track of your priorities;
• Strong interpersonal and verbal / written communication skills that enable the ability to work effectively in a collaborative team environment across the entire company;
• Excellent English communication skills, both verbal and written; Dutch and / or French is a plus;
• A positive, team‑oriented, and mission‑driven attitude;
• Ability to prepare and present your work to colleagues.

Benefits

• A training budget of 10,000 EUR plus 10 days paid time off rolling over two years;
• Working with and learning from the best people in the European cyber security “scene”.
• A forward‑thinking and agile company that supports you in the creation and implementation of new initiatives;
• Unique team events (most recently e.g. Lisbon, Dubai, Malta);
• A sophisticated coaching concept starting on day 1;
• 30 days of vacation;
• Flexible working hours and home office options (Working Abroad Option);
• Cost absorption for the Klimaticket;
• Company bike leasing.

Disclaimer on the Use of AI Tools in the Application Process

Please be aware that the creation and submission of application documents (e.g. CV, cover letter, case studies, etc.) using AI‑powered tools is only permitted to a limited extent.

Our expectations

Application documents must authentically reflect your own qualifications, personality, and motivation. The use of AI for supportive purposes (e.g. spell‑checking, improving wording) is acceptable. Fully generated application documents created by AI without personal adaptation or review are not permitted. Under no circumstances may NVISO information, data, or documents be uploaded to or processed by external AI tools. We reserve the right to exclude applications from the selection and interview process that are clearly created primarily or exclusively by AI and show no recognizable personal input. The purpose of this policy is to ensure a fair and transparent recruitment process and to obtain an authentic impression of our applicants.

We are a young team of cyber security professionals who decided to do things differently. With innovation rooted in our foundations, we offer services that are up against the modern adversary and that help you Prevent, Detect & Respond to cyber attacks.

Curious for more? Say hello and meet the team!