The Job:

• Recording technical and organisational customer requirements
• Process and architecture consulting for the efficient integration of security-relevant systems
• Accompanying and advising customer projects in the IT security context in the role of a trusted advisor
• Carrying out requirements, capability and gap analyses in relation to technical security controls
• Support in project planning and project execution
• Travel activity < 10%

Skills: 

• Many years of professional experience in IT, including several years in the upper mid-market or corporate environment
• Experience with the design of IT security architectures in medium-sized to large companies
• Basic understanding of the course of typical cyber attacks and suitable preventive measures
• Confident knowledge of German and English
• Relevant certifications, e.g. from ISACA, ISC2, ISO, GIAC, CSA are an advantage

The Job:

• Supporting our customers in setting up or further developing a SOC/CSIRT
• Carrying out needs, capability and gap analyses in the context of Incident Detection & Response
• Derivation and conception of suitable measures
• Development of use cases for detection & response
• Identification of critical assets to establish detection capability
• Identification and communication of different response strategies and their consequences
• Advice on the (further) development of the security incident management process
• Definition of response procedures for typical incident situations
• Advice on integrating security incident management into the surrounding process landscape
• Communication at eye level with various stakeholders, including representatives of IT operations, IT providers, etc.
• Travel < 10%

Skills: 

• Several years of professional experience in the field of information security incident management
• Deep understanding of the MITRE ATT&CK® framework
• solid expertise in setting up, improving or operating a SOC/CSIRT
• basic knowledge and understanding of IT service management principles and frameworks such as ITIL
• Solid knowledge of German and English
• Relevant certifications, e.g. from ISACA, ISC2, ISO, GIAC, CSA are an advantage

The Job:

• Analysis, evaluation and consulting regarding implemented role and authorisation models in Active Directory / Azure AD.
• Recording and evaluation of existing concepts for the administration of IAM systems and corresponding advice
• Assessment of the compliance of implemented IAM concepts with regulatory requirements
• Analysis and evaluation of implemented privileged access management concepts
• Consulting on zero-trust application and network access concepts
• Consulting on secure integration of various on-premise and cloud-based applications in Azure AD
• Travel < 10%

Skills:

In-depth knowledge and several years of experience in Active Directory and Azure AD.
solid understanding of modern zero-trust and separation-of-duty concepts
basic cloud security knowledge
fundamental understanding of attack techniques directed against IAM concepts, especially in the area of lateral movement and privilege escalation
Confident knowledge of German and English
Relevant certifications, e.g. from ISACA, ISC2, ISO, GIAC, CSA are an advantage