Information Security Expert​/Cyber Security Architect

Your role at ZEISS Digital Partners

As a Security Incident Detection & Response Expert, you will be instrumental in strengthening our Information Security organization by systematically identifying critical systems and building tailored detection, response, and protection capabilities around them. Your role involves creating and establishing end-to-end processes, playbooks, training initiatives, and support structures to enable sustainable, effective incident response across a cloud-driven landscape.

• Design and implement standardized incident response processes within a dynamic, cloud-centric digital department.
• Develop and maintain a critical risk register based on identified high-impact systems and their threat landscape.
• Lead and manage incident response and detection efforts to identify, analyze, and mitigate security threats.
• Support incident detection and response efforts to identify and mitigate security threats.
• Act as the instrumental translator between governance and operational teams, organizing a systematic identification process for our systems and landscape.
• Perform technical risk assessment of existing solution architectures and consult regarding best practices for technical risk mitigation.
• Design and implement end-to-end incident response processes, including detection, escalation, containment, eradication, and recovery.
• Create and document incident response playbooks specifically for cloud-native threats, such as Cloud-native threats.
• Design end-to-end response workflows for cloud environments (detection, triage, response, recovery, lessons learned).
• Lead and conduct trainings, live simulations, and workshops.
• Create actionable guidelines and awareness material for secure cloud usage and incident preparedness.
• Ensure systems and teams are onboarded into the incident response framework.
• Contribute to post-incident reviews.

• University degree in business informatics, engineering, or natural sciences.
• Education or vocational training in information security (Bachelor or Master) or equivalent combination of education and professional experience.
• Minimum 3-5 years of professional experience in IT or information security, such as information security management, ISO 27001, information security metrics, information security incident management (Detection engineering/security operations).
• Ideally possess IT security certifications or trainings (e.g., GIAC, GCIH, GCFA, or equivalent).
• Initial experience in successfully delivering projects related to information security incident management and supporting the implementation of framework policies at a global level in complex cloud environments.
• Experience building incident response processes and playbooks in complex cloud environments.
• Understanding of threat detection and contribute to incident reviews.
• Familiarity with common attacker techniques (e.g., MITRE ATT&CK), detection rules, and containment methods, with in-depth knowledge of major cloud platforms like Azure.
• Experience with SIEM, SOAR tools, log analysis, and cloud-native security monitoring.
• Analytical thinking, structured way of working, and quick comprehension skills.
• Business fluent in English; other languages are an advantage.

• Modern technology stack - with room for you to try things out in a high-tech group.
• 40-60% hybrid work option.
• Annual flexible benefits (cafeteria, private health plans, annual bonus).
• Ability to directly deliver software into real, innovative products.
• Global exposure [needs to be worked on]
• Excellent teammates and a lead to support your development from day one onward.

Your ZEISS Recruiting Team:
Wenner Lili