Security Operations Manager (f/m/d)

Exasol’s Analytics Engine accelerates insights from the world’s data. It is purpose-built to handle the most demanding data workloads at an unmatched price/performance ratio. Our in-memory, massively parallel processing (MPP) technology is specifically designed for analytics, enabling businesses to turn data into actionable insights.

At Exasol, we are committed to pushing the boundaries of what is possible in data analytics, and we are looking for enthusiastic individuals to join our team and help shape the future of data technology. Join our diverse, remote-first team where more than 30+ languages (and counting!) are spoken, and every voice is valued. We are looking for passionate individuals who thrive on collaboration, innovation, and a shared commitment to help shape the future of data technology.

As Security Operations Manager, you will play a key role in Exasol’s Information Security team, protecting our high-performance analytics platform, our cloud environments and the data our customers trust us with. Exasol operates in a regulated European environment. You will help ensure our security operations meet the requirements of ISO 27001, NIS2, DORA, the Cyber Resilience Act, and GDPR.

Working closely with the Team Lead Information Security, you will help deliver the team’s objectives and key results (OKRs) and bring our information security strategy to life. Your main focus is Security Operations. That covers day-to-day operations such as alert triage, security investigations and incident handling, alongside driving improvements in vulnerability management, threat detection, cloud and AI security. You will also support Governance, Risk & Compliance (GRC), giving you broad exposure across the security function.

This is a hands-on role for someone who enjoys solving technical problems from analysis to implementation. You take ownership of your topics, plan ahead, and keep the team and stakeholders informed so we can achieve our goals together.

Responsibilities and Main Duties:

You will take on a leadership role in driving and continuously improving Exasol’s security operations capabilities across cloud, infrastructure, endpoint, and SaaS environments within regulated European operating environments. This includes, but is not limited to:

• Handling day-to-day security operations, including alert triage, investigations, and security tickets.
• Leading incident response as the primary escalation point for complex or high-impact incidents, including classification, regulatory notification and post-incident reporting, and continuously improving incident procedures and playbooks.

• Strengthening threat detection by operating and tuning our SIEM, EDR/XDR and related platforms, onboarding log sources, building detections mapped to MITRE ATT&CK and leading threat intelligence activities.
• Driving vulnerability management and penetration testing, from risk-based prioritization through to verified remediation.

• Enhancing cloud security posture and conducting risk-based security reviews of new tools, integrations and architecture changes.
• Helping secure Exasol’s journey to becoming AI-native, including the safe adoption of AI tools and agents, governance of AI usage, and addressing emerging AI-specific threats.

• Contributing to data loss prevention initiatives (DLP) and other security initiatives from planning to delivery.
• Supporting governance, risk and compliance activities, including security controls, risk assessments, and ISO 27001 audits.

Requirements

• 7+ years of hands-on security operations experience, with a track record of implementing controls, integrations and detections.
• Strong hands-on SIEM and EDR/XDR experience, including log source onboarding, detection engineering with MITRE ATT&CK, and threat intelligence.

• Proven end-to-end vulnerability management, from identification to verified remediation.
• Hands-on experience securing public cloud environments using native cloud security services.

• Practical NIS2 incident handling experience; ideally also DORA, Cyber Resilience Act or GDPR reporting, and direct contact with European regulators.
• Sound security judgement and ownership mindset (continuously improving processes).

• Calm and professional under pressure, open to feedback and keen to learn.
• Strong relationship-building and clear communication with technical teams and senior stakeholders.

• Interest in AI security and in growing your Governance, Risk & Compliance skills, including ISO 27001.
• Fluency in English (must)

• German (Preferred)

Location Requirements

This role can be based at Exasol’s Berlin or Nuremberg office. Regular travel to Nuremberg is required. The role follows a hybrid working model, with flexible home office days.

About Exasol

Take the next step in your career journey. Visit http://www.exasol.com to explore our current job openings, and follow us on LinkedIn to see what it is like to work at Exasol.

Exasol is a proud equal opportunities employer. We are committed to a diverse and inclusive working environment and therefore base all our employment selection decisions, within all aspects of our business, on experience, skill, and integrity. We strongly encourage applicants from all walks to life to apply for our positions, irrespective of age, sex, gender identity, disability, sexual orientation, race, religion, etc.