Scientific Support Job Offer

Your future area of responsibility

CISPA is seeking a SOC Manager to establish and lead CISPA's Security Operations Center (SOC). This pivotal role involves setting up and managing a team dedicated to designing, developing, and maintaining a state-of-the-art SOC for CISPA and possibly other centers of the Helmholtz Association and external organizations. The SOC Manager will play a crucial role in strategic leadership, incident response oversight, and the integration of threat intelligence into daily operations, ensuring our institution's cybersecurity resilience.

• Establishment and Development of SOC:
  • Build and develop SOC processes, including defining objectives and adapting to changing requirements.
  • Select the technology stack and design the SOC architecture.
  • Hire and organize SOC staff, manage employee tasks, and represent the SOC within CISPA and to the public.
• Daily Security Operations:
  • Manage daily activities within the SOC to ensure effective incident detection and response.
  • Provide leadership, guidance, and technical expertise to deliver professional services to clients.
  • Ensure security detection, response, and recovery procedures are up-to-date and followed.
  • Oversee security incident management and integrate new security services into SOC capabilities.
• Content and Analytical Development:
  • Develop and maintain SOC policies, procedures, and processes to detect potential threats.
  • Define and review key security performance indicators for service delivery and improvements.
  • Continuously improve SOC services, including employee training, processes, and technologies.
  • Collaborate with internal and external stakeholders to create a needs-based SOC for the Helmholtz Association and other organizations.

Your profile

• Master or PhD in computer science or similar.
• Proven experience as a SOC Manager or SOC Team Leader.
• Certified Information Systems Security Professional (CISSP), Certified Information System Auditor (CISA); CISM, IISP, or other equivalent Security certification/accreditation is desirable.
• Strong knowledge of SIEM Systems, user and network anomaly analytics, SOAR integration and MISP Threat Intelligence sharing platform.
• Strong background in cybersecurity, including incident response and threat intelligence integration.
• Demonstrated leadership and team management skills.
• Excellent communication and collaboration abilities.
• Proven ability to work and effectively prioritize in a dynamic work environment.
• Strong communication, moderation and negotiation skills.
• Customer oriented.
• Analytical thinking.
• Proficiency in English.