Job Description: Tasks: Provide security oversight for internal and external customers Conduct in-depth technical analysis, documentation, and triage of security events and alerts Support threat hunting activities using cyber threat intelligence inputs Investigate security events by leveraging threat intelligence and vulnerability assessments Identify and respond to security-relevant anomalies, IOCs and TTPs Challenge existing detection rules and implement improvements Create and update security use cases and operational playbooks Report security incidents and investigation outcomes to customers Provide technical leadership in customer-specific Security Operations Center (SOC) decisions Support incident response efforts Optimize SOC operations Assist in the training and supervision of apprentices and working students Champion SOC best practices and drive continuous process improvement Provide technical support for pre-sales and bid activities Ensure customer focus and quality Optimize security tooling and enhance escalation management procedures Required qualification: The work task requires knowledge and skills, which are usually provided by a relevant, completed degree with a standard period of study of up to 4 years in the area of computer science, engineering, or mathematics or completed vocational training with a corresponding, particularly extensive, subject-specific additional qualification. The overall knowledge and experience required may have been acquired in other ways Required expertise: Proven knowledge and experience in the above-mentioned areas of responsibility Practical experience in the field of Security Analysis and Service Delivery Advanced skills with SIEM, EDR, and SOAR (e.g., PaloAlto, MS Defender, Sentinel) Solid understanding of SOC operations and associated service delivery Certifications such as MS SC-200, PaloAlto certifications, CISSP, CeH, GCIH, or GCFA are a plus A high degree of adaptability and strong organizational skills An open-minded, dynamic, and solution-oriented work approach Ability to work autonomously Excellent communication skills Creativity and initiative in addressing organizational and operational challenges Very good written and spoken German and English Willingness for business trips at home and abroad A security clearance is required for this activity or must be issued by the responsible authorities Location: Our location is just a stone's throw away from Munich, the beautiful state capital of Bavaria. Do you like sports and other outdoor activities? The Alps and Lake Starnberg are just an hour away and offer a wide range of leisure activities. Your advantages: Mobile working and flexible working hours Fair and attractive remuneration and special payments 30 days' holiday and additional days off for special occasions Intensive induction and expert support as part of onboarding in the form of personalized onboarding with a personal mentor Excellent training opportunities and promising development prospects Attractive social benefits and offers, including employer-financed pension scheme, employee share options, discounted car leasing, bike leasing, special conditions for insurance, employee benefits at cooperating companies On-site facilities (depending on location) e.g. canteen and cafeteria, fitness studio, on-site kindergarten, company medical service and other health-related services This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. Company: Airbus Protect GmbH Contract Type: Permanent Experience Level: Professional Job Family: Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com. At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.