Cyber Defense (M/F/D)

You protect companies. You detect attacks. You defend systems.

This role is ideal for people who:

• live security, not just “find it interesting”
• want to take on responsibility
• can detect, understand and neutralize attacks
• don't just run systems, but secure them
• think deeply about technology
• stay clear under pressure

Your impact at TOMORIS

TOMORIS supports critical, demanding customer environments – companies that see security not as an option, but as a necessity.

As part of the Cyber Defense team, you are directly responsible for:

• Attack detection
• Incident response
• Risk analysis
• Security hardening
• Security automation
• Building zero-trust structures
• Stability and integrity of production systems

Your decisions have immediate impact. You are responsible for systems, data and processes that must not fail.

Your tasks

Detect, analyze, respond

• Analyzing and handling security-relevant events
• Handling and documenting incidents
• Threat hunting & log analysis

Secure & harden

• Implementing security measures (Microsoft, Azure, Fortinet)
• Building and maintaining security configurations
• Hardening workloads, servers, identities and endpoints
• Implementing ASR, CA, Defender policies

Monitor & automate

• Monitoring SIEM/SOAR alerts
• Building security automations
• Creating and maintaining playbooks & runbooks

Prevention & advisory

• Conducting risk analyses
• Security workshops with customers
• Investigating and assessing vulnerabilities
• Preparing for audits and compliance requirements

Your profile - The TOMORIS Defense DNA

Must-haves

• Experience in security operations, incident response or IT security

Very good understanding of:

• Microsoft 365 Security
• Azure Defender / Sentinel
• Firewalls & network security
• Identity & access (MFA, CA, PIM, Entra)
• Knowledge of attack vectors, malware, phishing, zero-day concepts
• Ability to analyze logs & alerts thoroughly
• Precise, structured way of working
• Professional German & English

Nice-to-have

• Experience with Fortinet SOC or FG-Analyser
• PowerShell skills
• Experience with SOAR / automation
• Certifications such as MS-500, SC-200/300/400, Fortinet NSE or equivalent

Personality – High Performance Security

• you stay calm under pressure
• you react quickly & precisely
• you think analytically and forensically
• you take responsibility – no excuses
• you want to truly understand attacks, not just “click them away”
• your mindset is “I protect systems, people and companies”

Why TOMORIS – Your advantage

Because at TOMORIS, Cyber Defense is one of the most important roles in the company.

You get:

• TOMORIS University (security, Microsoft, Azure, Fortinet & leadership)
• Access to enterprise tools & security stacks
• State-of-the-art infrastructure (Defender, Sentinel, Fortinet UTM, SIEM, SOAR)
• Direct influence on IT security architectures
• Participation in IR cases, security projects & hardening measures
• Clear structures, SOPs, playbooks and repeatable security processes
• An environment that understands security – instead of “cutting it back”
• Further training & certifications paid

You work in a team that lives excellence, precision and speed.