Security Incident Response Manager (f/m/x)

DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation. We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas. Deutsche Bank's Chief Security Office is looking for a Senior Information Security professional to support the Bank's Threat Detection & Response function. The Security Incident Response Manager leads the coordination and resolution of security incidents, drives containment and mitigation activities, and helps protect the Bank, its clients, and partners from cyber threats and potential loss.

Assess security alerts and determine whether they constitute a security incident. Lead the investigation, coordination, and resolution of security incidents across technology and business teams. Evaluate financial, operational, customer, reputational, and regulatory impacts to determine incident severity and response priorities. Coordinate containment, mitigation, and recovery activities to minimize business and security risks. Communicate incident status to stakeholders and maintain accurate documentation to ensure effective handovers and audit readiness.

Good understanding of enterprise technologies especially focusing on security devices, network engineering, operating systems, databases and security configurations on application level. Familiarity with the MITTRE ATT&CK framework, good knowledge of current threat landscape and attack scenarios/tactics, as well as containment and protection measures. Background on incident management, preferrable in the cyber-security field. Strong understanding on system logs analysis, network traffic logs, payload analysis, event logs, application logs, firewall logs, Active Directory etc. Strong understanding of Security Incident and Event Management (SIEM) systems, such as Splunk Enterprise Security, Google SecOps, or Sentinel. Fluent in English, very good communication skills and confident assuming timely decisions.  Independent way of working with strong decision making and problem-solving ability. Appetite for continuous learning. Comfortable/experienced with working in international & multicultural teams. Always a plus System Administration or Security Operations experience, particularly on Google Cloud and/or Azure environments. Experience of networks, firewalls and related security tools. CISSP, CISM, GCIH or other relevant certifications in the field. German language skills. Well-being & Benefits Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health. Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness. A professional, passionate, and fun workplace. A modern office with fun and relaxing areas to boost creativity. Continuous learning culture with coaching and support from team experts. A culture where you can openly speak about mental health. Physically thriving: We support you managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-up's. Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being. 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays). Hybrid working