Security Operations

• Act as a central point of contact for alert triage, incident identification and security event investigation across EPI environments
• Execute incident response activities using structured frameworks such as SANS PICERL
• Conduct proactive, hypothesis-driven threat hunts based on attacker behaviour, emerging threats, threat intelligence and MITRE ATT&CK techniques
• Parse, analyse and correlate logs from authentication, application, system, endpoint and cloud telemetry sources, including AWS and Azure
• Design, tune and maintain detection rules, use cases, dashboards, custom alerts and automation workflows
• Contribute to SOC playbooks, runbooks, SIEM and EDR integrations
• Document and communicate threat findings, incident outcomes and remediation recommendations
• Collaborate with engineering, SOC, IR and IT teams to improve detection coverage, response readiness and operational resilience

Security Operations Engineer

• Operate the detection environment in Microsoft Defender XDR
• Triage alerts, implement and tune rules from the catalog, and systematically reduce false positives
• Support security incidents through analysis, documentation, and post-incident review
• Grow into taking ownership of cases
• Operate vulnerability management: coordinate scans, assess findings, and track patches through to completion
• Technically implement ISMS measures as directed by the Information Security Officer
• Maintain evidence for audits and C5 attestations
• Operate and further develop the phishing reporting process
• Help shape security awareness initiatives

Security Operations jobs in Germany

Security Operations Engineer

IT Security Specialist – Security Operations, Compliance