Senior Incident Responder in the Security Operations Center (SOC) | Systemadministrator (m/w/d)

Job Summary

This critical role involves acting as a Senior Incident Responder within the Security Operations Center (SOC) for Germany's largest pension insurance provider, contributing to the security of a complex and vital IT infrastructure. The successful candidate will lead, coordinate, and execute end-to-end Incident Response (IR) processes, from initial analysis and containment to remediation of security incidents, collaborating closely with internal and external teams (e.g., CERTs, IT Operations, IT Forensics). Key responsibilities include securing data for forensic handovers, optimizing SIEM and EDR use-cases for enhanced threat detection, and developing standardized Playbooks and IR plans. Candidates must possess a university degree in IT or equivalent qualification, coupled with extensive experience in Incident Response, Digital Forensics, or Threat Hunting, and strong knowledge of network technologies, operating systems (Windows/Linux), and scripting for automation.