信息安全专员 Cyber security specialist

Responsibilities:1.Monitoring the IT and OT infrastructure for attacks using a SIEM tool in cooperation with the managed security provider. 通过托管安全供应商的SIEM工具来监控IT和OT运行2.Responding to security incidents by developing, coordinating and applying suitable countermeasures in cooperation with the system administrators concerned. 与系统管理员合作，制定、协调和应用适当的安全措施来处理安全事件3.Further improvement of the ability to detect cyber security incidents in time by integrating new log sources into the SIEM system in cooperation with the system owners and the managed security provider. 与系统管理员和托管安全供应商合作，添加新的系统日志源到SIEM系统4.Management of existing log sources in cooperation with the system owners and the managed security provider 与系统管理员和托管安全供应商合作，管理SIEM系统的日志源。5.Development of new and further development of existing detection rules and Use Cases together with the managed security provider. 与托管安全供应商合作，在SIEM系统中创建新检测规则和用例6.Analysis of security events for suspicious activities in the SIEM system regardless of security incidents (Threat Hunting). 分析SIEM系统中的可疑活动，降低系统的安全风险7.Write IT automation scripts by Python or PowerShell or Shell 通过Python或PowerShell或Shell编写自动化工具Requirements:1.Successfully completed studies in computer science, business informatics or comparable qualification 计算机，信息管理相关专业本科以上学历2.Several years of professional experience in the field of IT infrastructure operations (e.g. IT network, Identity Access Management, server management, client management) 具有三年以上IT基础设施运营相关的工作经验(如IT网络、身份及访问管理、服务器管理、客户端管理)3.Advanced knowledge of current technology and IT architectures, systems（e.g. Cloud technology, Virtualization，at least one of Python/PowerShell/Shell） 熟悉当前技术和IT系统，体系结构（如云技术，虚拟化，Python/PowerShell/Shell至少一种）4.First experience in Security Incident and Event Management and respective tools 了解信息安全事件管理系统（SIEM）和相关工具5.Business fluent English language skills 英语流利6.Negotiation skills Enjoy working with experts from various areas of Festo Global IT and independent and autonomous working method 沟通能力强，不仅能独立完成自己工作，而且能和全球专家团队协作工作7.Ideally recognized certifications (GSEC, CEH, CIPP, CISSP, SSCP, CFSSP) or equivalent industry certifications 具有下列认证证书 (GSEC、CEH、CIPP、CISSP、SSCP、CFSSP) 或同行业认证证书优先8.Optional: Festo specific IT Knowledge 了解Festo特定的IT知识优先

职能类别：运维工程师