Description
DB Global Technology is Deutsche Bank’s technology center in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.
You will be responsible for the full range of tasks associated with the detection of cyber threats in a fast-paced environment for Deutsche Bank’s cloud workloads, especially on the Google Cloud Platform stack, using cloud based SIEM/SOAR solutions.
Responsibilities
- You will be expected to be able to identify areas for improvement and take accountability to drive security topics forward within and outside the team
- In this role, you will also contribute to the development of Security Information and Event Management (SIEM) content, focusing on the Google Cloud Platform stack (Google SecOps, Security Command Center, etc.) including detection use cases, automation playbooks, reports, network and asset model management, dashboards, rules/logic, documentation, and process establishment
- Collaborate with other security specialists and experts to support the architecture, design and implementation of services and processes to support our mission of detecting cyber threats
- Work in close cooperation with Cyber Intelligence, Incident Response, and the Security Operations Centre for the purpose of extending and strengthening the division’s capabilities relating to threat analytics for cloud service
Skills
- Minimum 1 years hands-on experience with GCP or alternatively MS Azure / AWS with focus on security services from one of the beforementioned cloud providers.
- Having at least 6 months experience in developing, modifying, enhancing, and fine-tuning detection and alerting/threat hunting use-cases in any type of SIEM solution (Splunk, LogRhythm, QRadar, Sentinel, SecOps) and understanding of industry wide known detection query languages: KQL, Sigma, YARA, YARA-l, SPL, etc.
- Familiarity with Cyber Security Incident Response or computer forensic processes, or a strong interest and capability to learn the fundamentals of security operations within a short time.
- Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development /Application Security, data protection, cryptography, key management, identity and access management, network security) within SaaS, IaaS, PaaS, and other cloud environments
- Have at least 2 years’ work experience in the fields of either: Encryption; IAM (Identity & Access Management), Security Monitoring & Incident Response, Network Security, Pen Testing, Security Operation, Application Security
Well-being & Benefits
- Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.
- Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive.
- Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.
- Financially secure: We support you in meeting personal financial goals during your active career and for the future.