SOC/CDC Incident Responder / Engineer

About this job

Kontakt

Your Rohde & Schwarz recruiting team is looking forward to receiving your application.

Ref. Nummer

3181 mehr

Tasks

• Responsible for handling L3 incidents and guiding L1 & L2 support colleagues.
• Lead cybersecurity incident handling from triage to containment, eradication, recovery, and lessons learned.
• Perform in-depth incident analysis to identify root cause, attack path, affected systems, business impact, and required remediation.
• Coordinate response activities with CDC, IT, and business stakeholders.
• Create incident reports, timelines, documentation and recommendations.
• Create and improve incident response processes, playbooks and SOPs.
• Prepare and conduct trainings on incident investigation and response (e.g. tabletop, hands-on technical trainings).
• Support analysts to monitor, analyze and triage security events and alarms in real-time based on relevant security threats and risks.
• Support our cybersecurity engineers to continuously improve the CDC (e.g. fine-tuning detection rules).
• Pro-actively monitor the current threat level and initiate threat hunting.
• Possibility of working in a shift model in the future.

Our colleagues provide insider information about

• Daily adventures and challenges
• Our passionate team
• The technologies behind the innovative projects and solutions

Qualifications

• Engineering degree in Computer Science, Information Security from reputed college/ university.
• Min. 5-8 years of professional experience in cybersecurity in a multinational company.
• Strong practical experience in incident handling, investigation and forensics.
• Must have experience in handling P1 & P2 issues at enterprise level.
• Ability to stay calm under pressure and take ownership.
• Capability to analyze and eliminate complex issues.
• Experience with SIEM, SOAR, EDR/XDR, firewalls, IDS/IPS, anti-malware or similar tools.
• Experience with cloud security and technologies such as AWS, Azure, M365.
• Knowledge of security frameworks and standards such as MITRE ATT&CK, NIST, ISO 27001.
• Experience in threat hunting, threat intelligence and/or IT service management (e.g. ITIL) is a plus.
• Relevant certifications such as GCIH, GCIA, GCFA, CySA+, CISSP, or similar are beneficial.
• Ideally, an interest in automation.
• Team player and excellent communication skills with fluency in speaking & writing English; German is added advantage.

Contact and further information

We welcome your application! Submissions are preferred online via the application portal. For questions, our chatbot Paul and the recruiting team are available at any time.

Rohde & Schwarz promotes equal opportunities and welcomes applications from people with and without disabilities. We offer an inclusive work environment where all individuals can develop their skills and talents regardless of gender, nationality, ethnic and social background, religion, worldview, age, sexual orientation, identity, and other characteristics.

At Rohde & Schwarz, we develop and produce solutions in the fields of Test & Measurement, Technology Systems, and Networks & Cybersecurity – driven by the vision of a safer and connected world. From software to final production, our more than 15,000 employees create products and systems that set global standards and enable technological sovereignty for industrial, regulatory, and government customers worldwide. Our headquarters, located in the heart of Munich, also serves as our main development site. In India the company is present as Rohde & Schwarz India Pvt. Ltd (RSINDIA) which is 100% owned subsidiary of Rohde & Schwarz GmbH & Co. KG, Germany, whose head office is located in New Delhi and branch offices in Bangalore, Hyderabad, Mumbai and Field presence at Ahmedabad,…