Job Description

• Act as the primary point of contact for our MDR provider:
  
  - Manage daily operations, escalations, and service delivery
  - Review, triage, and validate alerts and incidents
  - Drive continuous improvement in detection and response
  
  
• Develop and maintain SOC processes, runbooks, and playbooks
• Perform initial incident analysis, containment coordination, and handover to IT or business stakeholders
• Lead post-incident reviews and lessons-learned exercises
• Manage and tune SIEM/SOAR use cases and integrations
• Establish KPIs, reporting, and metrics for SOC effectiveness
• Collaborate with IT, OT, and business teams to strengthen monitoring coverage
• Support the CISO in roadmap development for an in-house SOC capability
• Mentor and train future SOC analysts as the team expands

Job Requirements

• 5+ years of experience in Security Operations, Cyber Defense, or Incident Response
• Proven experience working with MDR/SOC providers
• Strong knowledge of SIEM, SOAR, EDR/XDR, and Vulnerability management solutions
• Hands-on experience in investigating and responding to security incidents
• Solid understanding of attack techniques (MITRE ATT&CK), threat intelligence, and defense strategies
• Ability to write/run detection rules and create operational playbooks
• Excellent communication skills in German and English

Benefits

• Active Participation: Challenging work in an innovative environment with your own area of responsibility
• Open Corporate Culture: Pleasant working atmosphere and collegial collaboration
• Attractive Compensation: According to the collective agreement of the metal and electrical industry, including all additional benefits, Christmas and vacation bonuses, as well as a company pension plan
• Vacation Package: 30 days of annual leave and the option for flex days
• Work-Life Balance: Compensation through flexible working hours and a home-working option
• Corporate Benefits: Exclusive access to Germany’s largest employee benefit platform
• Our Locations: Easy to reach by train or car, with large parking areas and electric charging stations
• Catering: Meal subsidies and a varied selection in our modern company cafeteria, employee café, and snack stations
• Development: Comprehensive onboarding as well as continuous personal and professional development through participation in our tailored training program
• Community: Participation in joint events, leisure activities, and sports programs