Cyber Security Analyst (Web & eCommerce Platforms) (m/f/d)

12 million cyber attacks are directed against the Lufthansa Group - every day. If you want to combine your passion for tech and your fascination for aviation, then our Lufthansa Group Cyber Defense Center (CDC) is the right place for you. Together we take off and bring cyber security to a whole new flight level. - Ready for take-off?

Tasks

• Your day starts with a team call where current challenges, attacks, and changes affecting the Lufthansa Group’s eCommerce platforms are discussed.
• Priorities for the day are set and aligned with overall activities.
• After that, you move on to the incidents — which are different every day — and require your full expertise.
• Later, an IT Ops call begins, where you work on improving security configurations to strengthen defenses and stay one step ahead of potential threats.
• The call is interrupted by an attack, which you quickly and expertly analyze and mitigate.
• You end the day with the satisfying feeling of having made a real impact; thanks to you, the Lufthansa Group is a bit more secure once again.

Benefits

• Support for academic studies
• Flight privileges
• Lockers for cyclists / sportsmen
• Company bonus (if applicable)
• Company pension plan
• Free parking
• Hybrid working possible
• Showers
• 13th monthly salary
• Cafeteria
• Stay connected program
• Special deals with selected partners

Requirements

It is an advantage if you have several years of experience in the field of web security and have already worked on and helped shape the protection of large e-commerce platforms in other companies.

• Completed university degree in (business) computer science, cyber security or similar
• Communication skills, also across different hierarchical levels
• Organizational talent with high team spirit
• Fluency in German and English
• In-depth knowledge of Internet and web technologies at all OSI layers
• High level of expertise in current protocols such as DNS, HTTP, TLS etc.
• Extensive experience in planning, implementation and operation of systems for content delivery networks (e.g. Akamai or Cloudflare), web application firewalls as well as defense against botnet attacks on large eCommerce platforms
• Good experience with "Infrastructure As Code" based on Terraform
• Good knowledge of the risks for web technologies such as OWASP Top 10