ACTICO keyvisual im gegenverlauf

Operational Security Engineer (f|m|x)

Your Challenge

  • Build, configure and operate the SIEM system (Microsoft Sentinel or similar), including the integration of all relevant log sources (Entra ID, firewalls, servers, cloud)
  • Manage and co-manage the external SOC/MDR service provider (24/7 monitoring, incident escalation, threat hunting)
  • Operate and further develop endpoint security (Microsoft Defender for Endpoint, Intune compliance policies, Conditional Access)
  • Plan and carry out BCM tests and restore drills (including the use of dedicated test hardware)
  • Act as the point of contact for external and internal audits as well as certifications in the area of information security
  • Administer and optimise firewall rules, Secure Web Gateway, PAM (Entra PIM) and bastion access (Windows 365)
  • Build SOAR playbooks to automate incident-response processes
  • Advise the development teams on secure software development, secret scanning and code signing
  • Contribute to the Security Committee (KPIs, vulnerability management, dashboards, strategic decisions)

Your Skills

  • At least 3–5 years of professional experience in IT security operations or a comparable role
  • Sound knowledge of SIEM operations (ideally Microsoft Sentinel / Azure Monitor)
  • Experience with Endpoint Detection & Response (EDR), vulnerability management and incident response
  • Knowledge of the Microsoft 365 E5 security stack (Defender, Intune, Entra ID, Conditional Access)
  • Experience with business continuity management and disaster recovery testing
  • Good knowledge of network security (firewalls, VPN, segmentation)
  • A structured and self-directed way of working
  • Very good German and English language skills

Further qualifications that would be an advantage
  • Experience with cloud security (Azure, AWS) and CIS hardening
  • Knowledge of SOAR platforms and playbook automation
  • Certifications such as CompTIA Security+, CISSP, CEH, SC-200 or comparable
  • Experience in regulated environments (financial sector, ISO 27001)
  • Knowledge of container security (Kubernetes, Docker)


We look forward to receiving your complete application (including your CV, your most recent employment references, and your diploma/degree) via our careers portal.

Benefits

  • Flexible working hours (flexitime and no core working hours)
  • A great working atmosphere and a motivated team
  • Home-office options to help you balance work and family life
  • The opportunity to work from abroad temporarily through our worldwide workation program
  • A personal mentor and individual development opportunities, such as training courses, specialist seminars and trade fairs
  • Modern workplaces with attractive benefits, including team events, free drinks, fresh fruit, an ice cream freezer in summer and much more
  • 30 days of annual leave based on a five-day working week, allowing you to recharge
  • Employee discounts through the corporate benefits portal
  • Company pension scheme
  • Company health insurance and access to a company doctor
  • Sports program through EGYM Wellpass and a company bike through bike leasing
  • A permanent employment contract

Benefits

We would like you to join us. And we offer a lot in return.

Contact us

Our Human Resources team is pleased to help if you have any questions.

Send us an E-mail