Key Responsabilities

Architect/engineer Data Loss Prevention security solutions covering Broadcom DLP EndPoint, Discovery
Provide advice, training and support on DLP Policy development
Support the architecture, design, deployment and integration of DLP solution
Create engineering solutions for back-end management server infrastructure and databases
Develop and maintain detection rules and use cases across security monitoring platforms (SIEM, EDR, NDR, cloud security tools).
Analyse emerging threats and translate them into actionable detection logic.
Continuously improve detection coverage based on threat intelligence, incident trends, and vulnerability exposure.
Monitor security alerts and identify suspicious activities that may indicate malicious behaviour.
Investigate anomalous events and determine whether they represent real security threats.
Work closely with SOC analysts and incident responders to ensure detections support effective investigations.
Reduce false positives by tuning detection rules and correlation logic
Applying system, user and application changes as needed
Tracking and troubleshooting user issues or tasks and incidents
Create, review, maintain and update documentation including Documenting & Publishing fixes in central knowledge base
Work with global teams to provide consistent processes and solutions

Tools & Technologies

Security Information and Event Management (SIEM)

o Microsoft Sentinel

o Splunk Enterprise Security

Endpoint Detection and Response (EDR/XDR)

o Microsoft Defender XDR

o CrowdStrike Falcon

Network and Infrastructure Detection

o Network Detection and Response (NDR) platforms

o Intrusion Detection / Intrusion Prevention Systems (IDS/IPS)

o Firewall, proxy, VPN, and network telemetry solutions

Cloud and Identity Security Monitoring

o Microsoft Entra / Azure AD logs

o Microsoft 365 security telemetry

Threat Intelligence and Detection Engineering

o Threat intelligence platforms and indicator feeds

o MITRE ATT&CK mapping and detection use case libraries

o IOC/IOA-based detection content

Experience and skills required

Bachelor’s degree in information technology, Computer Science or a related discipline
5+ years of experience in data leakage analysis or data loss prevention for an enterprise network, cybersecurity monitoring, detection engineering, or SOC operations.
Strong background of architecting, engineering and automating security solutions for a global environment of focusing on Data Leakage Solutions
Log analysis and event correlation
Detection rule development
Advance knowledge of security monitoring tools (SIEM, EDR/XDR, NDR)
Good scripting knowledge (Python, PowerShell, or similar)
Knowledge of common attack techniques and tactics
Understanding of network protocols and system behaviour
Knowledge of Symantec, Broadcom and O365
Understanding of SIEM integrations
General knowledge of infrastructure (LDAP, Group Policy, Kerberos, Active Directory, etc.) and networking (routing, firewalls, OSI Model, packet trace and analysis, etc.)

DTSE-RO is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decision at DTSE-RO are based on business needs, job requirements and individual qualifications, with no regard to race, color, religion or belief, national, social or ethnic origin, sex, age, physical, mental or sensory disability, sexual orientation and gender identity.

DTSE-RO will not tolerate discrimination or harassment based on any of these characteristics.

By applying for this job you accept the DT privacy statement:

To process your online application we collect, process and use your personal data. We will treat your data as strictly confidential in accordance statutory provisions.

By submitting your application, you consent to your data being processed electronically, including by third parties. Data is only passed on to HR service providers that have been carefully selected by Deutsche Telekom AG.

For detailed information read the local data protection when applying for a job position at Deutsche Telekom Group.

#LI-Hybrid