Bauer Technology sets the strategy for the Bauer companies within the group, it co-ordinates major investments and technology change programmes, bringing the company on a journey from a highly federated set of autonomous and independent companies to an operation that maximises the opportunity of working at scale across the group – through knowledge sharing, collaboration and centres of excellence. Bauer Technology has a wide range of knowledge and experience from publishing, and printing, to radio broadcasting, and the full range of Enterprise IT systems and services and digital customer facing services.
Distributed across Europe, Bauer Technology has significant presence in Germany (headquarters), Poland and the United Kingdom. It is a highly matrix managed organisation, often having dual reporting lines to Group functions and business leadership structures within each territory.
The role holder will be part of the Bauer Cyber Defence Centre (CDC) Team. The CDC operates internal real-time cyber threat detection and response services for all Bauer entities in 14 countries across Europe, ensuring cyber-attacks are stopped before they can cause any damage. Additionally, the CDC continuously monitors Bauer’s group wide attack surface to detect security risks and managing their mitigation.
Your responsibilities:
- Management and further development of all tools and processes in the domains of real-time threat detection & response and attack surface management, including our Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) platforms.
- Development, operation, and continuous optimization of SIEM and EDR detections as well as integrations with third party tools and data sources.
- Design of technical and organizational incident response processes and automation of response actions leveraging our Security Orchestration Automation and Response (SOAR) platform.
- Performing and assessing security tool aided scans of cloud environments, endpoints and web applications for vulnerabilities, weaknesses, and misconfigurations.
- Extracting valuable insights and actionable recommendations for our IT teams from all sorts of security and system data by applying analytical methods.
- Reviewing the day-to-day security incident handling activities conducted by our Tier 1 and 2 Security Analysts, facilitating knowledge transfer in the team, and promoting continuous learning and self-development.
- Acting as a member of the virtual CICT (Cyber Incident Coordination Team) which is formed in major security incidents. Providing both technical expertise and the analytical skills to investigate cyber-attacks on a deeply technical level.
Your profile:
- B.Sc. or M.Sc. in computer science, information security, data science, software engineering or a comparable qualification or significant work experience and 5+ years of professional experience in information technology
- Hands-on experience in at least three of the following domains:
- Security Information and Event Management (SIEM)
- Security Orchestration Automation and Response (SOAR)
- Endpoint Detection and Response (EDR)
- Web Application and Vulnerability Scanning
- Amazon Web Services (AWS)
- Microsoft Azure
- Industry recognised qualifications (CISSP, SSCP, CCSP, SANS GIAC, CompTIA) would be an advantage
- Strong knowledge of enterprise information technology, such as:
- Microsoft environments, including Windows, Active Directory and Office 365
- Common operating systems, including Windows, Linux and MacOS
- Networking principles, topologies and protocols
- Identity and Access Management
- Containerization with Docker, Kubernetes, Amazon ECS and similar
- Source control management, i.e., Git, GitLab, GitHub, Azure DevOps
- Ability to cope with stress and handle many sources of information in the event of multiple major security incidents occurring at the same time and to develop and present solutions for mitigating security issues in a non-offensive, supportive way on all technical and managerial levels.
- Language skills: Fluent in English (must), Language Skills in German or Polish (desirable)
We are a media business focused on creating content that matters to millions of people across Europe. Our offering extends from print and online publishing to audio broadcasting and entertainment, alongside investments in other media related sectors. With more than 500 million copies sold each year, we are one of Europe’s largest Publishers. From women’s and celebrities’ magazines to TV listings to food and special interest, we own some of the most popular publishing brands in Germany, UK, Poland and France – both digital and print.