Cyber Defense Expert
Offer summary

(Summary generated by AI based on the full job description)

The project involves joining a CERT team responsible for handling IT security incidents. Key technologies and tools are Microsoft Sentinel, Microsoft Defender, KQL, Velociraptor and Splunk. Responsibilities include identifying and analysing incidents across the incident response lifecycle, malware, network and log analysis, ticketing and hotline triage, and translating findings for non-technical stakeholders. Practical experience in threat hunting, networks, Windows/Linux and attack/mitigation techniques is required.

newquick apply

Cyber Defense Expert

Company: thyssenkrupp Group Services Gdańsk

from: 28 September 2026
to: 28 October 2026
salary not specifiedcontract of employment (full-time)
Offer parameters
level:expert
working mode:remote
Gdańsk, Oliwa
Gdańsk, Oliwaaleja Grunwaldzka 472DView on map

Requirements

Operating system

Windows
Linux

Our requirements

  • Degree in Computer Science or a comparable qualification with a focus on IT Security
  • Several years of professional experience in operational IT security / SOC / CERT, comprehensive knowledge of cyber-attack techniques and mitigation strategies, as well as hands-on experience independently analyzing and handling complex IT security incidents
  • Deep understanding of networks, IT infrastructures, and operating systems (Windows and Linux), with a focus on threat hunting
  • Proficiency in using recognized security tools such as Velociraptor, Splunk, Microsoft Defender, and Sentinel
  • Sound expertise in developing complex KQL queries for incident investigation and advanced threat hunting, ideally complemented by industry-standard certifications (e.g., GCIA, GCIH, GCTI, GREM, GRID, GCED, GCTD, or Mandiant Practical Threat Hunting)
  • Fluent communication skills in both German and English (written and spoken)

Your responsibilities

  • Serving as a member of the thyssenkrupp CERT, providing group-wide support in identifying and investigating IT security incidents
  • Assisting affected business units with analyzing, evaluating, handling, and resolving cybersecurity incidents, as well as communicating mitigation techniques and countermeasures
  • Identifying and processing IT security incidents across all phases of the incident response lifecycle, and conducting advanced analyses of malware, network traffic, log data, and threat actor profiles
  • Handling diverse inquiries via ticketing system and hotline, alongside triaging and processing security alerts
  • Focusing on analyzing, evaluating, and managing incidents in Microsoft Sentinel and the Microsoft Defender portal, with an emphasis on detailed event investigation using Kusto Query Language (KQL)
  • Translating technical findings and complex security concepts for non-technical stakeholders, maintaining regular communication across various organizational levels
  • Proactively monitoring emerging technologies and continuously updating technical expertise to keep pace with industry advancements
Company

Benefits

  • sharing the costs of sports activities
  • private medical care
  • sharing the costs of foreign language classes
  • sharing the costs of professional training & courses
  • life insurance
  • remote work opportunities
  • flexible working time
  • integration events
  • corporate sports team
  • coffee / tea
  • parking space for employees
  • leisure zone
  • extra social benefits
  • charity initiatives
  • MyBenefit Platform
  • Foreign language classes
  • Relocation package

thyssenkrupp Group Services Gdańsk

thyssenkrupp Group Services Gdańsk is a global competence and development center delivering business processes and services to numerous companies from thyssenkrupp – an international group of companies, comprising largely independent industrial and technology businesses and employing more than 100,000 people across 56 countries. Under the umbrella brand thyssenkrupp, the group creates long-term value with innovative products, technologies and services and helps make life better for future generations.

This is how we work

Cyber Defense Expert
I apply to:
thyssenkrupp Group Services Gdańsk
Gdańsk, Oliwa

Need more information?

  • Make sure the body of the offer doesn’t already include what you’re looking for.
  • Ask a question if you need more information you’re interested in.
  • We’ll forward your question to the employer and aim to provide a response within 3 business days.

Share this offer