Senior Security Incident Responder (m/f/d)

Allianz; Unterföhring; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Company bonus scheme

Pension plan

Employee stock program

Employee discounts

Job summary

Allianz Technology in Germany (Allianz Technology) seeks a Senior Security Incident Responder to lead complex incident response activities across a global infrastructure. You will analyze data, drive improvements, and contribute to automation while collaborating with Threat Intelligence, Vulnerability Management and Business Applications teams.

Join a hybrid work model with on-call duties and opportunities to influence security posture and internal tooling across Allianz's cyber defense program.

Qualifications

• Master's degree preferred in Computer Science, Cyber Security or related field.
• Extensive experience in Incident Response, managing complex environments; IT Forensics, Malware Analysis or Vulnerability Management is a plus.
• Broad technical proficiency: Linux/Windows, Active Directory/Entra ID, web tech, email, networking, cryptography, DevOps tools.

Responsibilities

• Lead complex incident response activities in a globally distributed environment across all incident phases.
• Acquire and analyze data from diverse sources and report findings clearly.
• Conduct incident reviews, drive process improvements, update runbooks and guidelines.
• Contribute to internal toolset with new features and automation scripts.
• Analyze attack patterns and threat actors to improve detection and defense capabilities.
• Collaborate with Threat Intelligence, Vulnerability Management and Business Applications teams; participate in on-call shifts.

Skills

Incident Response

IT Forensics

Malware Analysis

Vulnerability Management

Linux/Windows

Entra ID / AD

Networking

Python

Golang

PowerShell

Education

Master's degree in Computer Science or Cyber Security

Tools

Python

Golang

PowerShell

Shell scripting

CI/CD

Entra ID/Active Directory

Job description

About the Job

The Incident Response cluster within the Allianz Cyber Defense Center (ACDC) is a team of dedicated Incident Responders with the mission to limit the impact of security incidents on Allianz's global infrastructure. We coordinate the response to cybersecurity incidents, conduct investigations across the Allianz Group, and are actively involved in strategic security projects. As a Senior Security Incident Responder, you play a key role in this team: you lead complex incident response activities, bring deep technical expertise, and make a significant contribution to continuously improving our security posture and internal capabilities.

What you do:

• Coordinate and own security incident response activities in a heterogeneous, multi-cultural, and geographically distributed environment — engaging all relevant technical and non-technical stakeholders across all phases of an incident.
• Acquire and analyze data from various sources during incident response activities and report on findings in a clear, actionable manner.
• Conduct incident reviews, identify improvement potentials, and support the implementation of improvements — including updating guidelines, runbooks, and internal processes.
• Actively contribute to enhancing ACDC's internal toolset through new ideas on functionality and features, as well as by developing automation scripts and custom tooling.
• Analyse complex attack patterns and threat actors, derive technical insights, and provide recommendations to improve Allianz's detection and defence capabilities.
• Collaborate closely with internal teams — including Threat Intelligence, Vulnerability Management, and Business Applications Teams — as well as external partners to ensure holistic and coordinated incident response.
• Participate in on-call shifts and contribute to the ACDC team's 24/7 availability, ensuring rapid response to critical security incidents at any time.

What you bring:

• University degree (Master's preferred) in Computer Science, Cyber Security, or a related field.
• Extensive work experience in Incident Response, including managing complex environments; expertise in IT Forensics, Malware Analysis, or Vulnerability Management is a plus.
• Comprehensive technical expertise in system architecture with broad proficiency in key IT security technologies: Linux and Windows, Active Directory / Entra ID, web technologies, email, networking, cryptography, and widely used DevOps tools.
• Software engineering and scripting skills: Python, Golang, Shell scripting, PowerShell, CI/CD, and database management.
• Strong understanding of technical and organisational aspects of information security, demonstrated through prior defensive or offensive work experience.
• In-depth knowledge of fundamental attack concepts: terminology, tools, tactics, techniques, and procedures (TTPs).
• Exceptional analytical and problem-solving mindset with the ability to collect, structure, analyse, and communicate large amounts of information with precision and attention to detail.
• Excellent communication and interpersonal skills in English & German (fluent, written and spoken, including security terminology); willingness to participate in on-call shifts. Relevant certifications (e.g. SANS/GIAC, GCIH, GNFA, GCFA, GREM, GCFE, GIME), CompTIA Security+, CISSP, CISA, or CISM) are a plus but not mandatory.

What we offer:

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

100848 | IT & Tech Engineering | Professional | Non-Executive | Allianz Technology | Full-Time | Permanent

About Allianz Technology

With its headquarters in Munich, Germany, Allianz Technology is Allianz's global IT service provider and delivers IT solutions that drive the group's digitalization. With more than 11,000 employees in over 20 countries around the world, Allianz Technology is tasked to run, optimize, transform, and innovate the infrastructure, applications, and services together with Allianz companies to co-create the best customer experience.

We service the entire spectrum of digitalization – from one of the industry's largest IT infrastructure projects that spans data centres, networks, and security, to application platforms ranging from workplace services to digital interaction.

In short: We deliver comprehensive end-to-end IT solutions for Allianz in the digital age. We are the backbone of Allianz.

Commitment to Integrity, Fairness & Inclusion

Allianz Technology is proud to be an equal opportunity employer dedicated to fostering an inclusive work environment for everyone. We embrace individuals of all gender identities and expressions, sexual orientations, ethnicities, ages, nationalities, religions, disabilities, and philosophies of life. Ultimately, our greatest strength as a company lies in the unique skills, experiences, and backgrounds our employees contribute.