Description:
The Security Operations Center (SOC) enhances MunichRe’s and ERGO’s cybersecurity posture by providing a centralized monitoring, detecting, responding to, and managing security incidents and threats. It serves as the backbone of the cybersecurity strategy, aiming to proactively defend against threats and respond effectively to incidents to safeguard MunichRe’s and ERGO’s infor-mation and reputation.
Your Role:
- Process security incidents that have already been pre-qualified in level 1 SOC analysis based on playbooks that are created and maintained in SIEM engineering
- Document the incident
- Transfer the incident to the appropriate party (e.g. CSIRT) and support them in the further analysis and processing of that security incident if the incident cannot be resolved in Level 2
- Document improvement potential per incident and implementation of lessons learned
- Create and maintain standards for internal procedures governing the day-to-day work of the team
- Contribute to regular feedback workshops with SIEM Engineering, Level-1, and CSIRT to optimize the procedures and the tools used, such as run books
- Define configuration standards for hardening of systems
- Support SIEM Use Case Development - Collaboration in the creation, maintenance, and optimization of the rules and regulations and the instructions for the processing of incidents
- Carry out operational activities ordered by the IT Security Manager
- Provide on-call duty
Your Profile:
- Postgraduate diploma from accredited institution
- Minimum of 2 years of working experience in a Security Operations Center (SOC) or Computer Security Incident Response Team (CSIRT)/Computer Emergency Response Team (CERT)
- Strong knowledge of current and emerging security threats
- Broad experience in network infrastructure e.g. firewalls, IDS/IPS systems
- Knowledge of Internet technologies, server, desktop, and mobile OS
- Ability to work according to compliance standards in a confidential environment
- Ability to explain complex technical matters in simple terms
- Strong analytical and communication skills
- Flexible, creative, and a good team player with a 'can-do' attitude
- Willingness to engage in continuous learning and self-education
- Willingness for on-call shifts