> Markdown version of [/jobs/ext/3025231-security-operations-center-specialist](https://www.wearedevelopers.com/jobs/ext/3025231-security-operations-center-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Operations Center Specialist

- **Company:** Liebherr-International Deutschland GmbH
- **Location:** Biberach an der Riß, Germany
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Python (Programming Language), Windows PowerShell, Kusto Query Language, Security Information and Event Management, Scripting, Mitre Att&ck, Information Technology, Microsoft Sentinel, Splunk, Blue Team (Cyber Security)
- **Published:** September 22, 2026
- **Apply:** https://www.stepstone.de/stellenangebote--Security-Operations-Center-Specialist-m-f-x-Oberopfingen-bei-Kirchdorf-an-der-Iller-Liebherr-IT-Services-GmbH--14529247-inline.html

## About the Role

* A Bachelor's or Master's degree in Cybersecurity, Computer Science, or related field, or otherwise justifiable experience
 * 3+ years in cybersecurity, or proven relevant experience
 * Good command of the English language (spoken, written) is required, German and French are a plus
 * Good communication skills to work in an international hybrid team

Advantageous:

 * Demonstrable Experience with SIEM systems (Microsoft Sentinel, Splunk) & SOAR platforms
 * Proficiency in scripting languages (Python, PowerShell)
 * Security Certifications are an advantage (CISSP, SANS 450+ , Blue Team LVL x, OSCP, etc)
 * Knowledge of cybersecurity frameworks and standards (e.g. ISO27001, NIST) is advantageous
 * Advanced knowledge of security monitoring methodologies
 * Incident management experience
 * Good knowledge of MITRE ATT&CK Framework

## Description

* Build use cases and configure security tools and technologies (e.g. SIEM, xDR) to detect security events and potential incidents
 * Participate in Security Operations & alert monitoring: conducting incident assessments, determine impact and root causes, provide reports and recommendations
 * Assist in coordinating global containment, eradication, and recovery
 * Contribute to refining incident response processes and tools
 * Configure and manage Microsoft Sentinel, including data connectors, KQL queries, analytics rules, workbooks, log sources
 * Support the onboarding and integration of various log sources, as well as administration of SOC infrastructure as needed
 * Support the build of runbooks, continuous improvement and SOC reporting as needed


## Related Videos

- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans)

## Related Articles

- [IT Salaries in Germany](https://www.wearedevelopers.com/magazine/287-it-salaries-in-germany)
- [Finding IT & Technology English-speaking Jobs in Germany ](https://www.wearedevelopers.com/magazine/446-finding-it-technology-english-speaking-jobs-in-germany)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)
- [Finding Jobs in Germany](https://www.wearedevelopers.com/magazine/375-finding-jobs-in-germany)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)