IT Cyber Security

Aufgaben

• Monitor and analyze cybersecurity alerts and threats in coordination with L1/L2 SOC teams.
• Review and improve detection rules, dashboards, and automated alerting using Elastic SIEM / Kibana.
• Lead security incident response, root cause analysis, and long-term mitigation initiatives.
• Develop SOAR and scripting automation to improve incident response efficiency.
• Lead security projects involving XDR, DLP, HSM, PAM, Cloud Security, BYOD, and Patch Management.
• Manage IAM and MFA implementation and enforce Least Privilege Access.
• Perform security hardening across servers, endpoints, and cloud resources.
• Review technical documentation and ensure compliance with secure-by-design principles.

Anforderungen

• Bachelor’s degree in Computer Science, Informatics Engineering, Information Systems, or a related field.
• 3–6 years of experience in Cybersecurity, preferably with a background in SOC Operations or SIEM.
• Hands-on experience with Elastic SIEM / ELK Stack or similar SIEM platforms.
• Strong knowledge of security log analysis and threat detection across network, application, and system environments.
• Understanding of system architecture, security solutions, and secure-by-design principles.
• Experience in incident response, root cause analysis, and security threat mitigation.
• Familiar with security automation (SOAR/scripting), XDR, DLP, HSM, PAM, Cloud Security, IAM, and MFA.
• Strong analytical, problem-solving, and communication skills.
• Self-driven, quick learner, and able to work independently with minimal supervision.

Preferred Certifications

• CEH
• CompTIA Security+
• GCIH
• Elastic Certified Analyst

Skills:

• DLP
• Iso27001
• ELK
• XDR
• Kibana
• Elastic SIEM
• Iam