water IT Security & Defense

• You are the first point of contact for everyone who wants to join water – from the initial active sourcing outreach to the signed contract, you accompany candidates with genuine interest rather than just processing steps. • You ensure that new water people feel at home from day one – with well-thought-out pre-onboarding, a warm welcome call, and onboarding experiences that leave a lasting impression. • Contracts, certificates, benefits, Personio – you keep an overview of the administrative side of HR and make sure everything runs smoothly in the background while keeping people at the center. • You have a keen sense for when a birthday, wedding or recovery deserves more than a standard message – and you turn those moments into a lived culture of appreciation. • Whether it’s the recruiting process or an HR document – you think along, help develop our standards further, and ensure they actually fit into our everyday life at water.

• Für unsere vielfältigen Kund:innen analysierst und eskalierst du Security Incidents - inklusive Root-Cause-Analysen, Eskalationsprozessen und aktivem Threat Hunting. • Du hast Lust, nicht nur zu reagieren, sondern aktiv mitzugestalten? In Workshops und regelmäßigen Jour-Fixen bist du die zentrale Ansprechperson für unsere Kund:innen rund ums Incident Handling & Co. • Du sorgst du dafür, dass bei uns alles rundläuft. • Im Wechsel mit dem Team übernimmst du die Rufbereitschaft – auch mal nachts oder am Wochenende. • Zusammen mit unserem Engineering Team sorgst du dafür, dass wir und unsere Kund:innen immer einen Schritt voraus sind.

• You analyze. You prioritize. You protect. • With your trained eye on our SIEM (Security Information & Event Management), you detect security-relevant events, assess incidents, and ensure nothing falls under the radar. • You prioritize efficiently and keep the big picture even when data volume is high. • Following agreed SLAs, you handle incidents, document your findings, and, when necessary, communicate directly with our clients. • You create clear and well-founded reports that deliver not only facts but real added value. • You present your analyses in a concise, practical way—whether on client calls or internally with the team. • You provide concrete recommendations for closing security gaps and optimizing protective measures. • Because true security doesn’t take breaks, you’ll work with your team in a 3-shift system (early, late and night shifts).

• You take ownership of our Customer & Partner newsletter — your own marketing project at water. • You gather content from the team, keep timelines and deadlines in check, and ensure everything is ready on time. • You write copy, design, and schedule the newsletter — with support from a colleague. • You work on the graphic implementation and contribute your own ideas for design and layout. • You track KPIs and performance, share learnings with the team, and iteratively develop the newsletter. • You support the creation of copy and graphics for social media, blog posts, and mailings.

• As part of our consulting team, you advise companies on effectively implementing their IT security strategy using Microsoft technologies — not just on paper, but in practice. • You are involved from the initial requirements analysis through to live operations. • You are more than a consultant: you become part of the projects you support and deliver real, measurable value. • You analyze business and technical requirements and work with our clients to develop their IT security strategy — from design to implementation. • You take projects from A to Z: requirements gathering, implementation, documentation. • You work independently and have real scope to shape solutions. • You lead workshops for requirements analysis and provide architecture and strategy consulting — acting as the primary contact for clients and sales. • You further develop managed services and workshop formats — internally and externally — and actively share your knowledge, optionally including public speaking. • You track trends in the security landscape and contribute new ideas for the strategic development of our consulting practice.

• You advise our clients on building and advancing their crisis resilience: from designing crisis organizations and establishing and training crisis management teams to embedding resilience into day-to-day operations • You work with clients to build crisis teams in a structured way, define roles and procedures, and ensure demonstrable operational readiness in emergency situations • You plan and facilitate crisis exercises and simulations, from tabletop exercises to full-scale drills, so teams know what to do when it matters • You actively shape our crisis simulation formats: design scenarios, develop exercise materials, and detail the content and flow of simulations • In Business Continuity Management (BCM) and IT Service Continuity Management (ITSCM) you guide clients from Business Impact Analyses (BIAs) through emergency concepts to practical runbooks and playbooks, in close collaboration with our Cloud Architect • You monitor regulatory developments, identify implications for our clients, and introduce new approaches into our consulting practice

• You analyze complex client infrastructures and translate their requirements, constraints and operating models into cloud-based disaster recovery concepts • You go on-site to review client processes and the underlying IT resources and dependencies • You design the appropriate recovery architecture—whether active/standby, traditional DR, or a complete greenfield rebuild—and implement it technically • You validate, test, and keep the environment operational • You write the recovery/runbook together with our Business Continuity Management (BCM) team • You actively support presales: explain and position technical solutions convincingly and represent them to clients together with sales • You identify early where client environments require special handling and develop pragmatic solutions instead of idealized architectures • You share your knowledge within the team, help colleagues onboard in complex client situations, and contribute to the continuous improvement of our technical delivery standards

• Complex security incidents land with you — you dig deep, perform thorough analyses, and make well‑founded decisions • As an escalation point, you bring calm to critical situations and keep communication between customers and internal teams clear and structured • In customer meetings (e.g., monthly reviews or ad‑hoc), you build trust, explain context clearly, and empower customers to use security processes independently • Together with Engineering, you further develop best practices around Microsoft Sentinel & Defender • You don’t just maintain playbooks and processes — you make them genuinely better, focusing on quality and efficiency • You actively share your knowledge with 2nd‑level analysts, lifting the whole team to the next level • False positives annoy you as much as they do us — that’s why you actively work to improve our detection quality

• Planning, coordination and management of cybersecurity projects • Preparing and maintaining project plans, status reports and risk registers • Liaising with internal teams and clients • Creating presentations and documentation • Monitoring progress, budgets and milestones • Supporting early identification of risks • Taking responsibility for smaller subprojects or tool rollouts

• You will play a central role in establishing and expanding our business continuity practice while also developing into our broader cybersecurity portfolio. • You will be responsible for selling our BCM services and positioning us as a strong partner for resilience, crisis preparedness, and operational security. • You will proactively pursue new business opportunities, build a robust pipeline, and develop a clear plan to achieve targets. • In C-level conversations you will understand the challenges of our (prospective) clients, realistically assess needs, and translate them into a compelling value proposition. • Over time you will expand your portfolio to include cybersecurity services from the Microsoft Defender ecosystem (including Managed SOC). • Together with Consulting, SOC Engineering, and Delivery you will support demos, workshops, and tender processes, ensuring technical depth and feasibility go hand in hand. • You will prepare tailored proposals, conduct contract negotiations confidently through to closing, and keep follow-ups, forecasts, and pipeline management in the CRM up to date. • In close coordination with Marketing you will design campaigns, pursue leads, and develop them into real opportunities.