water IT Security GmbH

You will act as a 3rd level escalation point for complex security incidents and manage communication between clients and internal teams. Additionally, you will collaborate with engineering to develop best practices for Microsoft Sentinel and Defender while improving detection quality.

Analyze and escalate security incidents, perform root-cause analysis, and conduct active threat hunting for diverse clients. Act as the central point of contact for incident handling and collaborate with the engineering team to implement new security trends.

Analyze and prioritize security events using SIEM to protect customers and ensure no incidents go unnoticed. Handle incidents according to SLAs, create detailed reports, and provide recommendations to close security gaps in a 24/7 shift system.

Advise clients on building crisis resilience, including the design of crisis organizations, training crisis teams, and conducting simulations. Support Business Continuity Management (BCM) and ITSCM through Business Impact Analyses and the creation of practical runbooks and playbooks.

Analyze complex customer infrastructures to design and implement cloud-based disaster recovery concepts and emergency architectures. Support presales activities by presenting technical solutions and collaborate with the BCM team to create recovery plans.