• Für unsere vielfältigen Kund:innen analysierst und eskalierst du Security Incidents - inklusive Root-Cause-Analysen, Eskalationsprozessen und aktivem Threat Hunting. • Du hast Lust, nicht nur zu reagieren, sondern aktiv mitzugestalten? In Workshops und regelmäßigen Jour-Fixen bist du die zentrale Ansprechperson für unsere Kund:innen rund ums Incident Handling & Co. • Du sorgst du dafür, dass bei uns alles rundläuft. • Im Wechsel mit dem Team übernimmst du die Rufbereitschaft – auch mal nachts oder am Wochenende. • Zusammen mit unserem Engineering Team sorgst du dafür, dass wir und unsere Kund:innen immer einen Schritt voraus sind.

• You analyze. You prioritize. You protect. • With your trained eye on our SIEM (Security Information & Event Management), you detect security-relevant events, assess incidents, and ensure nothing falls under the radar. • You prioritize efficiently and keep the big picture even when data volume is high. • Following agreed SLAs, you handle incidents, document your findings, and, when necessary, communicate directly with our clients. • You create clear and well-founded reports that deliver not only facts but real added value. • You present your analyses in a concise, practical way—whether on client calls or internally with the team. • You provide concrete recommendations for closing security gaps and optimizing protective measures. • Because true security doesn’t take breaks, you’ll work with your team in a 3-shift system (early, late and night shifts).

• Secure the future of compliance—lead CMMC readiness with your CCP expertise and make an impact where cybersecurity meets strategy. • Support clients in achieving Cybersecurity Maturity Model Certification (CMMC) readiness. • Play a critical role in delivering gap analysis, developing and implementing remediation plans, and supporting process documentation and incident response strategies. • Deliver CMMC readiness services, including: Gap analysis, Process remediation, Security documentation, Incident response planning and testing. • Collaborate with stakeholders to ensure understanding and adoption of CMMC requirements. • Contribute to the development of policies, procedures, and system security plans (SSPs). • Support ongoing security assessments and readiness tracking.

• Identify, record, and track risks, issues, non-conformities, and security action plans. • Support assessments of adherence to standards, internal policies, frameworks, and regulatory requirements. • Produce risk analyses, opinions, and reports for leadership, committees, and responsible areas. • Monitor deadlines, owners, evidence, and the effectiveness of mitigation plans. • Contribute to the improvement of the cyber risk management process and control governance. • Support internal and external audits, inspections, and regulatory requests. • Integrate information from incidents, vulnerabilities, third parties, IAM, AppSec, and architecture to provide a consolidated risk view. • Act proactively in initiatives (projects, technology changes, new products) by identifying security risks and proposing controls prior to production rollout. • Define, monitor, and report metrics that measure risk exposure and control effectiveness.