Cyber Defense Manager (Incident Response)

Quick Facts

• Role: Cyber Defense Manager (Incident Response)

Description

Lead cyber defense and incident response activities, coordinating security incident management across the full lifecycle—from detection and containment to sustained follow-up. Analyze security incidents, perform root-cause analyses, and continuously improve detection and response processes. Orchestrate major security incidents and cyber crises while managing and monitoring an external SOC to ensure quality and service levels.

Responsibilities

• Provide professional leadership to an external Security Operations Center (SOC)

• Own security incident management, including escalation and communication processes

• Manage incidents end-to-end: detection → containment → sustainable post-incident remediation

• Evaluate security incidents, conduct root-cause analyses, and continuously optimize detection/response

• Orchestrate major security incidents and cyber crises; ensure coordination among IT, business units, management, and external partners

• Monitor external security service providers for quality, performance, and service levels; define KPIs and drive continuous improvement

• Use insights from vulnerability analyses, security assessments, and penetration tests to strengthen detection/response and cyber resilience

• Develop audit-ready processes, support audits, and advise management on cyber resilience

Requirements

• Degree in Computer Science, Business Informatics, or IT Security; alternatively completed IT-focused training or comparable qualification

• Several years of experience in incident response, security operations, vulnerability management, or operational IT security

• Proven ability to handle security incidents and cyber crises, including coordination of external security service providers

• Expertise in current threat scenarios, attack methods, and cyber attack vectors

• Deep understanding of Linux, Windows, and hybrid infrastructure environments; experience with SIEM, EDR, and XDR

• Strong knowledge of network technologies and security solutions such as firewalls, IDS/IPS, and endpoint security

• Experience with vulnerability management, security testing, and penetration testing; understanding regulatory requirements for information security

• Fluent German and good English

Benefits

• Career development with tailored learning paths

• Mobile working options and flexible working hours for work-life balance

• Discounts on partner services

• Public transport subsidies

• Company pension and employer contributions

• Asset-building benefits

• Active health management including medical check-ups, counseling, sports events, cafeteria, and a coffee bar