Teamlead - Security Incident Response (all genders)

ABOUT YOU SE & Co. KG; Hamburg; Sur place; EUR 77 000 - 94 000; Plein temps

Avantages offerts par ce poste

Visit our benefits page

SANS/GIAC trainings

Résumé du poste

ABOUT YOU SE & Co. KG is seeking a Teamlead for Security Incident Response. The role focuses on leading DFIR activities, maintaining SIEM, and integrating AI into security operations in a cloud-native, security-conscious environment.

Candidates should have strong cyber security background, incident response experience, Python scripting ability, and proficiency with Linux. Fluent English is required, with leadership experience welcomed.

Qualifications

• Background in Cyber Security.
• Experience in incident response, blue teaming or digital forensics in cloud-native environments.
• Proficiency with SIEM tools and incident response playbooks.
• Ability to automate tasks with Python or other languages.
• Strong Linux and command-line skills.
• Excellent written and verbal English communication.

Responsabilités

• Set up and maintain DFIR tools and infrastructure.
• Provide first response during security incidents, including digital forensics and post-incident risk mitigation.
• Maintain and improve the SIEM tool.
• Improve monitoring and scanning tools to detect security issues and automate tasks.
• Integrate AI into security operations.
• Investigate and respond to security alerts in our systems.
• Create and maintain incident response playbooks.
• Monitor threats and vulnerabilities; implement preventative measures.

Connaissances

Cyber Security

Incident Response

Blue Teaming

Digital Forensics

Python

Linux

SIEM

Leadership

Cloud-native environments

English (Fluent)

Outils

SIEM tools

Web Application Firewall

Cloudflare

Description du poste

Teamlead - Security Incident Response (all genders)

• Full-time
• Compensation: from EUR 85,000 - yearly

We are looking for a Teamlead (all genders) to join the Security Incident Response circle of our IT-Security unit, dedicated to ensure that the customers of our online shop have a safe shopping experience and their personal data is secure with us. In addition, the team works to protect our corporate data and the hardware of our employees.

Set up and maintain DFIR tools and infrastructure

Provide first response during security incidents, including digital forensics and post incident risk mitigation

Maintain and improve the SIEM tool

Improve our monitoring and scanning tools to detect security issues and automate routine tasksPython programming experience required

Integrate AI into security operations

Investigate and respond to security alerts in our systems

Create and maintain incident response playbooks

Keep an eye on current threats and zero-day vulnerabilities in the cyber security space and implement preventative measures within the organization

You have a background in Cyber Security

You are experienced in incident response, blue teaming or digital forensics. Specifically in cloud-native environments

You are proficient with SIEM tools

You have leadership experience, formal or informal

You are able to write scripts and programs to automate tasks in Python or another programming language

You leverage agentic AI (beyond using it as a Q/A chat)

You are proficient with Linux

You have experience working with web application firewalls, Cloudflare preferred

You have good communication and presentation skills, you can explain technical terms in non-technical language

Fluent English skills (spoken & written)

Nice to have

Certificates:

Trainings from SANS / GIAC

HackTheBox / TryHackMe incident response challenges

Your perks at a glance: Visit our benefits page .

A Place Where You Can Be You

We take it as our responsibility to create an environment where everyone feels welcome, exactly as they are.

Different backgrounds and perspectives make us stronger and shape our culture in ways that matter.

What we stand for internally, we stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.