Security Analyst

The Security Operations Center (SOC) enhances Munich Re’s and ERGO’s cybersecurity posture by providing a centralized monitoring, detecting, responding to, and managing security incidents and threats.

It serves as the backbone of the cybersecurity strategy, aiming to proactively defend against threats and respond effectively to incidents to safeguard Munich Re’s and ERGO’s information and reputation.

Your Role

• Process security incidents that have already been pre-qualified in level 1 SOC analysis based on playbooks that are created and maintained in SIEM engineering
• Documenting the incident
• Transfer the incident to the appropriate party (e.g. CSIRT) and supporting them in the further analysis and processing of that security incident if the incident cannot be resolved in Level 2
• Document improvement potential per incident and implementation of lessons learned
• Create and maintain standards for internal procedures governing the day-to-day work of the team
• Contribute to regular feedback workshops with SIEM Engineering, Level-1, and CSIRT to optimize the procedures and the tools used, such as run books
• Define configuration standards for hardening of systems
• Support SIEM Use Case Development - Collaboration in the creation, maintenance, and optimization of the rules and regulations and the instructions for processing incidents
• Perform operational activities ordered by the IT Security Manager
• Take over the on-call duty

Your Profile

• Minimum 5 years of experience in IT security, with at least 2 years in a SOC or CSIRT/CERT
• Strong knowledge about (latest) security threats
• Broad experience in network infrastructure e.g. firewalls, IDS/IPS systems
• Knowledge of Internet technologies, Server, desktop, and mobile OS
• Ability to work according to compliance standards in a confidential environment
• Ability to explain complex technical matters in easy wording
• Flexible, creative, good team player with “can-do” attitude
• Strong analytical skills
• Strong communications skills
• Willingness for permanent learning / self-education
• Flexible to support global operations across multiple time zones

At Munich Re, we embrace, and value, the interaction of diverse backgrounds, experiences, perspectives and thought. This interaction is our foundation. Of our open culture and spirit of partnership. Of how our teams are built and cultivated. Of how we are supported and developed. And at the center of this interaction is each of us.