IT Cyber Defence Specialist

Responsibilities :

Definition of standard procedures for the assigned technology area and - in case of national or local necessary deviations from IT (security) standards - also within this scope

All responsibilities relate to the assigned regional responsibility and technology area (Service Unit)

Ensure the implementation of measures to remedy regional or local deviations from defined IT security standards

Validation of the achievement of the specified security level (after implementation by IT Delivery) and regular reporting of the current level of security and proposal of appropriate measures to remedy deviations and weaknesses

Identification and documentation of recognized national or local requirements or contractual obligations that prevent the implementation of defined IT security standards

On-call duty according to the deployment plan for participation in the CSIRT and taking over the management of the CSIRT in the absence of the IT Cyber Defence Lead

Coordination of local IT staff for the analysis of local systems or for the implementation of necessary countermeasures during the response to IT security incidents

Close cooperation with the IT Security Architecture organization

Actively monitoring the development of current security threats and technologies and appropriate countermeasures responsibilities:

Identification of capacity bottlenecks based upon experience and the available tools

Executing regular tasks with accordance to existing documentation and ensuring its up-to-dateness including creation of missing

Ensuring application compliance with security and vendor recommendations

Troubleshoot incoming Incidents relating to the platform itself and the implementations running on top

Liaising with the Subject Matter Experts, External Support, Service Stakeholders and Customers on requests

Participating in platform new releases, functionality extensions and development implementations within, contributing to tests, support take-overs as well as training others

Working with accordance to latest IT processes recommendations, goals and with a Continuous Service Improvement anchor in mind.

Education and Personal Qualities:

University / technical college degree in (technical) informatics or comparable qualification

At least 3 years of professional experience in active Cyber Defence

Practical experience in leading CSIRT / IT Security Incident response activities

Knowledge and practical experience at least in the following technologies: Network, Firewalls, Intrusion Detection/Prevention, Client management tools

Knowledge of IT security standards such as ISO 2700x, NIST Cybersecurity Framework

IT security certification (CISSP, CEH, CompTIA Security+, ...) advantageous

Strong analytical and problem-solving skills

Ability to develop pragmatic solutions to mitigate threats without losing sight of the operational requirements

Strong personality and willingness to professionally coordinate the local IT specialists and other involved IT personnel

Excellent communication skills in English