Senior Elastic Stack Content Engineer (m/f/d)

operational services (OS) is one of the leading ICT service providers in the German market and is considered the backbone of digitization for the German Mittelstand (small and medium-sized enterprises). It is the leading, agile unit of the Telekom Group for sustainably accelerating the digital transformation in the German Mittelstand. With over 1,000 highly qualified employees, it develops and operates state-of-the-art information systems, manages private & public cloud platforms, secures long-term 24/7 system support, and ensures the availability of critical operational processes.

JOB IDENTIFIER: 992026007BE

• Planning, project management, and execution of implementations and commissioning with a focus on Security, SIEM, and Observability
• Analysis and resolution of problems as well as fault diagnosis in detection scenarios within SIEM systems (Content Engineering)
• Design, introduction, and optimization of detection scenarios in security analytics systems (e.g., Elastic SIEM)
• Leadership of complex orders and projects, including resource planning, management, and coordination of collaboration with the SOC provider, management of a project team of Content Engineers, and ensuring technical and time target achievement
• Definition, initiation, and control of measures to ensure service levels, security standards, and customer satisfaction
• Development of strategic concepts for the specification and development of extensive solutions and requirements specifications, particularly in the areas of detection scenarios and protection goals, as well as holistic detection concepts
• Technical support or leadership in acquisition processes, including feasibility analyses
• Active participation in the further development of the service and solution portfolio as well as the security solution implemented for the customer, particularly in the areas of Elastic Security, Observability, and Content Engineering

• Master's or Diploma degree in Computer Science, IT Security, or comparable qualification – alternatively, corresponding, demonstrable professional experience
• At least seven years of professional experience, including at least five years in IT Security, in the areas of Threat Detection, Content Engineering, SOC, or similar
• Experience with SIEM and/or XDR systems (Palo Alto, Elastic, SPLUNK, etc.)
• Very strong customer-oriented and entrepreneurial thinking, including in collaboration with management and C-level executives
• High analytical and conceptual competence, especially in attack techniques and defense measures in the cybersecurity environment
• Certifications in IT Security or Elastic are an advantage
• Very good German and English language skills, both written and spoken

• Nationwide mobile working
• Attractive salary package with profit sharing
• 37 hours/week with working time accounts
• Employer-funded further training and certifications

Further benefits include our bike leasing, 30 days of vacation, subsidized Deutschlandticket, employer-funded pension plan, capital-forming benefits, group accident insurance for work and leisure, as well as employee discounts on many products of the Deutsche Telekom Group.

ADZN1_DE