CYBER DEFENCE ANALYST L3 (D/F/M)

****Job Description:******Tasks:*** Provide security oversight for internal and external customers* Conduct in-depth technical analysis, documentation, and triage of security events and alerts* Support threat hunting activities using cyber threat intelligence inputs* Investigate security events by leveraging threat intelligence and vulnerability assessments* Identify and respond to security-relevant anomalies, IOCs and TTPs* Challenge existing detection rules and implement improvements* Create and update security use cases and operational playbooks* Report security incidents and investigation outcomes to customers* Provide technical leadership in customer-specific Security Operations Center (SOC) decisions* Support incident response efforts* Optimize SOC operations* Assist in the training and supervision of apprentices and working students* Champion SOC best practices and drive continuous process improvement* Provide technical support for pre-sales and bid activities* Ensure customer focus and quality* Optimize security tooling and enhance escalation management procedures**Required qualification:**The work task requires knowledge and skills, which are usually provided by a relevant, completed degree with a standard period of study of up to 4 years in the area of computer science, engineering, or mathematics or completed vocational training with a corresponding, particularly extensive, subject-specific additional qualification. The overall knowledge and experience required may have been acquired in other ways**Required expertise:*** Proven knowledge and experience in the above-mentioned areas of responsibility* Practical experience in the field of Security Analysis and Service Delivery* Advanced skills with SIEM, EDR, and SOAR (e.g., PaloAlto, MS Defender, Sentinel)* Solid understanding of SOC operations and associated service delivery* Certifications such as MS SC-200, PaloAlto certifications, CISSP, CeH, GCIH, or GCFA are a plus* A high degree of adaptability and strong organizational skills* An open-minded, dynamic, and solution-oriented work approach* Ability to work autonomously* Excellent communication skills* Creativity and initiative in addressing organizational and operational challenges* Very good written and spoken German and English* Willingness for business trips at home and abroad* A security clearance is required for this activity or must be issued by the responsible authorities**Location:****Your advantages:*** Mobile working and flexible working hours* Fair and attractive remuneration and special payments* 30 days' holiday and additional days off for special occasions* Intensive induction and expert support as part of onboarding in the form of personalized onboarding with a personal mentor* Excellent training opportunities and promising development prospects* Attractive social benefits and offers, including employer-financed pension scheme, employee share options, discounted car leasing, bike leasing, special conditions for insurance, employee benefits at cooperating companies* On-site facilities (depending on location) e.g. canteen and cafeteria, fitness studio, on-site kindergarten, company medical service and other health-related servicesThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.********Company:********Airbus Protect GmbH**Contract Type:**Permanent**Experience Level:**Professional**Job Family:**Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.Airbus Protect provides services in cybersecurity, safety and sustainability, protecting Airbus company-wide and meeting the needs of national authorities and commercial customers, including critical infrastructures.Our mission is to use our deep knowledge and diverse industry expertise to make a meaningful impact. We enable our clients to concentrate on growing their businesses and building a trusted future, while ensuring their safety, security and sustainability never wavers.We are dedicated to our employees and our clients. Our relationships are based on deep trust empowering us to tackle complex projects and co-innovate to build a better future : #J-18808-Ljbffr