Data Engineer

Stack

Responsibilities

• ▹Analyzing and handling security-relevant events
• ▹Handling and documenting incidents
• ▹Threat hunting and log analysis
• ▹Implementing security measures (Microsoft, Azure, Fortinet)
• ▹Building and maintaining security configurations
• ▹Hardening workloads, servers, identities, and endpoints
• ▹Implementing ASR, CA, and Defender policies
• ▹Monitoring SIEM/SOAR alerts
• ▹Building security automations
• ▹Creating and maintaining playbooks and runbooks
• ▹Conducting risk analyses
• ▹Running security workshops for customers
• ▹Investigating and assessing vulnerabilities
• ▹Preparing for audits and compliance requirements

Requirements

• ▹Experience in Security Operations, Incident Response, or IT Security
• ▹Strong knowledge of Microsoft 365 Security, Azure Defender/Sentinel, firewalls and network security, Identity & Access (MFA, CA, PIM, Entra)
• ▹Knowledge of attack vectors, malware, phishing, and Zero-Day concepts
• ▹Ability to thoroughly evaluate logs and alerts
• ▹Precise, structured way of working
• ▹Professional-level German and English

Nice to have

• ▹Experience with Fortinet SOC or FG-Analyser
• ▹PowerShell skills
• ▹Experience with SOAR/automation
• ▹Certifications such as MS-500, SC-200/300/400, Fortinet NSE, or similar

Soft skills

What we offer

• ▹TOMORIS University training program (Security, Microsoft, Azure, Fortinet, Leadership)
• ▹Access to enterprise tools and security stacks
• ▹Modern infrastructure (Defender, Sentinel, Fortinet UTM, SIEM, SOAR)
• ▹Direct influence on IT security architectures
• ▹Participation in incident response cases, security projects, and hardening initiatives
• ▹Clear structures, SOPs, playbooks, and repeatable security processes
• ▹Paid training and certifications
• ▹Collective-agreement salary: entry level €4,061, regular level €4,611, experienced level €5,444 gross/month, with potential for overpayment
• ▹Training budget, paid certifications, performance-based bonus

About the company

TOMORIS's Cyber Defense team considers cybersecurity one of the company's most important functions. It offers employees its own training program (TOMORIS University), modern infrastructure (Defender, Sentinel, Fortinet UTM, SIEM, SOAR), and clear, repeatable security processes.