Cyber Defense Analyst/in 80%-100%

Your tasks Detection and defense of cyber threats: Monitoring and analysis of security events with SIEM and EDR systems to identify and defend against cyber threats. Incident Response and forensics: Carrying out event triage, analyses, and reaction to security incidents according to established cyber defense processes and frameworks. Threat Intelligence and prevention: Application of Cyber Threat Intelligence and preventive IT security tools for continuous optimization of the security posture. Vulnerability Management: Detection, assessment, and mitigation of vulnerabilities in the IT infrastructure. Projects and collaborative automation: Participation and design in projects for the further development and automation of SOC processes. Close cooperation with internal IT teams as well as external partners for the efficient coordination of security measures and Incident Response. Your profile Experience: Several years of practical experience in dealing with SIEM systems and other SOC-relevant security tools as well as sound experience in the IT security environment. Personality: Distinct analytical mindset, high problem-solving competence as well as curiosity to evaluate and classify complex cyber threats. Education: Completed training in computer science as well as relevant further training or certifications in the field of Cyber Security (e.g. OSCP). Language: Very good German and English skills in spoken and written form. Insight into our work IT BS is the internal IT service provider of the Canton Basel-Stadt and belongs to the Finance Department. The department provides the collaboration and communication infrastructure for the mobile and stationary IT workstations and the associated support. Additionally, IT BS also continuously develops various offers for the public in the area of eGovernment and digitalization. A functioning IT is central to the efficient operation of the cantonal administration. The cantonal administration Basel-Stadt operates a central Security Operations Center (SOC) to protect its digital infrastructure and critical services. To strengthen our SOC team, we are looking for a person with distinct analytical thinking and sound technical understanding for the early detection and defense of cyber threats. Together with your team, you ensure the Cyber Security of our critical IT infrastructure. Learn more Your contact Questions about the function Ferdinand Kuske Head of Security Operations Center Tel. 061 267 65 86 Questions about your application Anja Staub HR Business Partner / Ad No. 1515 Tel. 061 267 95 70