System Engineer Cyber Security (m/f/d)

About the job

That’s why we need you!

Because you want to not only identify security issues but also solve them! As part of our Blue Team, you connect System Engineering with Cyber Security at Leuchter. You analyse security alerts in our Security Operations Center (SOC), actively participate in customer projects, and implement preventive protection measures.

We are convinced: Good security analysts must understand the systems they protect. That’s why you consolidate and expand your knowledge in the Prevent area and in customer projects by configuring solutions yourself, testing protection functions, and fixing errors.

You can rely on an experienced team that shares knowledge, supports each other, and tackles challenges together. We value curiosity, reliability, and your own ideas. You will have the freedom to try out new approaches and independently carry out tasks.

Your tasks & responsibilities 

• You investigate security alerts and suspicious activities, clarify affected systems and accounts, and assess whether an attack has occurred. In security incidents, you assist with containment and remediation, document your investigation, and explain the results and next steps to our customers.
• You plan and implement system and cyber security projects for our customers and in our data centre. You clarify requirements, set up systems and protection functions in local, hybrid, and cloud-based environments, and test them. Documentation and acceptance are also part of this.
• You evaluate automated checks for vulnerabilities and insecure configurations and clarify with our customers which measures need to be implemented first. Together, you close security gaps, correct insecure settings or overly broad permissions, and then verify the results. We especially appreciate your ideas and your contribution to the further development of our security checks and automations.
• You operate our own security platform and analyse errors during ongoing operations. If data is missing or evaluations deliver unexpected results, you investigate the cause. You describe errors comprehensibly and pass on your findings and concrete improvement suggestions directly to development.
• You develop and test detection rules with the team, follow up on recurring false alarms, and supplement our playbooks with concrete investigation steps. You simplify recurring queries, data preparations, and manual steps through automation. Insights from incidents, customer projects, and current attack methods are used to continuously improve our detection and investigation processes.

What you bring with you 

You don’t need to know every product or be specialised in every security topic yet. What matters to us are solid technical fundamentals, careful work, and a willingness to learn.

• You have a computer science education or a comparable qualification and bring practical experience in system engineering or cyber security. You are also welcome if you are currently pursuing a part-time computer science degree.
• You are familiar with Windows Server and clients, Active Directory, Microsoft Entra ID, and Microsoft 365. You understand how systems, identities, and networks interact.
• You have already gained practical experience in individual security topics. For example, you have hardened systems, worked with endpoint security solutions, investigated security alerts, or secured identities and permissions. You want to get involved in other areas.
• Knowledge of Microsoft Defender XDR or Microsoft Sentinel is especially welcome. PowerShell for automation and KQL for analysis help you in everyday work.
• You appreciate direct customer contact and explain technical contexts clearly. You work in a structured and reliable manner, keep commitments, and handle customer systems and sensitive data carefully.
• You like to get to the bottom of technical questions, try out solutions, and share your knowledge with the team. Even under time pressure, you prioritise, openly address uncertainties, and seek support if needed.

What you can expect from us

• Holidays and leisure: Unsatisfied with 5-6 weeks of holiday? Buy or sell holiday days.
• Learn every day: Use up to five learning hours per week and benefit from financial support for your further education.
• Charity work: For your commitment to the common good, you receive up to 2.5 working days credited.
• Snacks and drinks: A nice ice cream in summer, nuts or coffee for your energy boost? There’s always something to nibble on in our office.
• Employee sponsorship: Your engagement in a club and a charitable organisation is financially supported by us.
• Celebrate together: Summer event, BBQ lunch, WLB events, lunch table and kickoff: let yourself be surprised by our numerous events. Discover more benefits