IT Security Engineer – Group Security (f/m/d)

Field of activity

CERT is the central organization for all cyber situational analysis (pro-active, detective and forensic). This includes the ownership of CERT processes, thus it focuses on the IS domains Security Incident Management, Alert & Log monitoring, Cyberthreat & vulnerability management.

Tasks/responsibilities

• Coordinate Penetration Tests to ensure applications and underlying infrastructure are secure
• Communicate zero-day threats and vulnerabilities to the relevant IT teams for prompt action e.g. patching
• Recommend security measures to address cyber threats identified, e.g. defining SIEM use-cases
• Maintain a threat landscape picture for DBAG identifying the most prominent threats
• Orchestrate threat hunting exercises
• Manage information security incidents by leading and coordinating investigations with stakeholders and documenting incident reports
• Help to improve the CERT process excellence by maintaining information security documentation
• Available during the working hours (Mo-Fr) + on call duty

Qualifications/required skills

• University degree in Computer Science, Information Security, Engineering or related discipline
• Minimum 3 years of experience in an information security role
• Previous experience in a CERT or SOC team or operation of a SIEM is considered a strong asset
• Broad knowledge of IT and Information Security technologies, operating systems, databases and applications
• Solid understanding of threats, vulnerabilities, and security controls
• Deliverable-oriented, with strong problem-solving skills 
• Team player willing to cooperate with multiple colleagues across office locations
• Good report-writing skills to present the findings of investigations
• Proficient in English (verbal and written). French and/or German is an asset