Respond to security incidents according to the security incident response policy and procedures
Provide technical guidance to first responders for handling information security incidents
Provide timely and relevant updates to appropriate stakeholders and decision makers
Communicate investigation findings to relevant stakeholders to help improve the information security posture
Validate and maintain incident response plans and processes to address potential threats
Compile and analyze data for management reporting and metrics
Monitor relevant information sources (such as specific technology related news, Twitter, LinkedIn and information sharing and analysis centers) to stay up to date on current attacks and trends
Analyze potential impact of new threats and establish new use cases together with our security platform engineers
Perform or participate in root-cause analysis to document findings, and participate in root-cause elimination activities as required
Create runbooks for frequently occurring incidents to automate or at least assist with the resolution of those cases
Together with our security engineers you develop new use cases to further improve our capabilities
Expand the reach of our existing tooling by onboarding new data sources and systems
Work in close partnership with our infrastructure teams, information security officer and colleagues from the REWE Digital SOC
Support an open feedback culture and a forward-looking error culture (learning organization)
As part of your work, you identify potential security risks and forward them to the necessary authorities
Mit dem Klick auf “Job-E-Mail bestellen” stimmst du unseren AGBs, unseren Datenschutzbestimmungen und der Nutzung von Cookies zu. Du kannst dich jederzeit von unseren E-Mails & Services abmelden.
Mit dem Klick auf “Job-E-Mail bestellen” stimmst du unseren AGBs, unseren Datenschutzbestimmungen und der Nutzung von Cookies zu. Du kannst dich jederzeit von unseren E-Mails & Services abmelden.