Level: Senior

Job Feld: IT, Security

Anstellung: Vollzeit

Vertragsart: Unbefristetes Dienstverhältnis

Ort: Jena

Arbeitsmodell: Onsite

Job Zusammenfassung

In dieser Position arbeitest du aktiv im Cyber Defense Center, führst technische Analysen durch und unterstützt bei der Reaktion auf Cybervorfälle, einschließlich Analyse, Eindämmung und Wiederherstellung.

Deine Rolle im Team

In this role, you are a senior technical expert within the Cyber Defense Center and a core member of the Cybersecurity Incident Response Team (CIRT).
You support the effective handling of cybersecurity incidents by contributing deep technical expertise, structured analysis, and reliable execution throughout the incident response lifecycle.
Your main responsibilities include:
Acting as a permanent member of the Cybersecurity Incident Response Team (CIRT).
Executing and supporting technical incident response activities, including analysis, containment, and recovery.
Escalating critical technical findings and risks to the Incident Commander.
Supporting the Incident Commander and Incident Coordinators in the technical execution of incident response activities.
Providing technical guidance and expertise to other IR roles.
Collaborating closely with Digital Forensics and Threat Intelligence teams to enable in-depth technical analysis.
Performing and reporting root cause analysis, incident status, and potential response measures.
Supplying accurate technical input for internal communication and external reporting to authorities via the Incident Commander.
Ensuring complete and structured documentation of all incident response activities.

Unsere Erwartungen an dich

Qualifikationen

Strong technical knowledge of IT infrastructures, networks, operating systems, and cloud environments.
Solid understanding of attacker Tactics, Techniques, and Procedures (TTPs) and the ability to identify, analyze, and respond to them in real-world incidents.
Sound understanding of established incident response frameworks (e.g. NIST, SANS).
Ability to communicate technical findings clearly and concisely to different stakeholder groups.
Structured, reliable, and resilient working style, particularly in critical situations.
As part of the recruitment process, security-relevant background checks may be conducted.
In the advanced application process, a police clearance certificate must be provided.

Erfahrung

Several years of professional experience in cybersecurity incident response, SOC, DFIR, or cyber defense environments.
Proven experience in handling complex or high-severity cybersecurity incidents.
Experience mapping observed activity to frameworks such as MITRE ATT&CK and deriving response or mitigation measures.