Job
In dieser Position entwickelst du neue Use Cases für die Sicherheitsüberwachung, führst Bedrohungsanalysen durch und sicherst die Erkennung von Angriffen durch praxisorientierte Validierung und Automatisierung unter Einsatz von AI.
Job-Technologien
Deine Rolle im Team
- Enhance threat intelligence by leveraging technology and information available from both internal and external sources.
- Perform threat management and threat modelling, identify threat vectors, and develop use cases for security monitoring.
- Analyze and assess damage to data and infrastructure resulting from security incidents, examine available recovery tools and processes, and recommend solutions.
- Validate and tune your own detection use cases by safely reproducing attacker techniques in our lab environment - we expect you to know what your rules look like when they fire.
- Take part in purple team exercises with our Adversary Simulation colleagues and turn observed attack behavior into reliable detection logic.
- Review the results of automated attack simulation runs and translate detection coverage gaps into concrete tuning and engineering tasks.
- You will work with AI-assisted triage, hunting and reporting from day one, and your feedback on where it helps - and where it is confidently wrong - will directly steer how we build it.
- You will help develop detection coverage for the bank's own AI adoption: our monitoring scope now includes AI and LLM workloads, not just traditional infrastructure.
- We would rather you automate your repetitive work than do it twice - contributions to detection-as-code and SOAR playbook development are explicitly part of the role.
Unsere Erwartungen an dich
Qualifikationen
- Strong understanding of the MITRE ATT&CK framework, the Cyber Kill Chain and other attack models.
- Practical understanding of how common attack techniques are executed - we value analysts who can reproduce a technique in a lab and recognize the traces it leaves in telemetry, rather than knowing it only from a framework.
- Ability to write Python or PowerShell scripts to automate tasks, enrich security data and validate detections.
- Familiarity with common offensive tools (e.g. BloodHound, Impacket, Mimikatz and C2 frameworks) and the forensic artefacts they leave behind is an asset.
- Awareness of security risks associated with AI and LLMs, such as prompt injection and data leakage, and familiarity with the OWASP Top 10 for LLM Applications are assets.
- Vendor-independent security certifications (e.g. CISA, CRISC, CISSP or CEH) are an asset.
Erfahrung
- Hands-on experience in security monitoring and incident detection within a Security Operations Center.
- Hands-on experience configuring, maintaining and improving SIEM platforms.
- Practical experience using LLM-based tools in your daily work, including effective prompting, recognizing unreliable output and verifying results before acting on them.
- Experience running ATT&CK-aligned tests using tools such as Atomic Red Team or Caldera, or working with breach and attack simulation platforms, is an asset.
- Experience working with cyber threat intelligence (CTI) platforms is an asset.
- A hands-on offensive security certification (e.g. OSCP or GPEN), or equivalent experience with advanced labs such as Hack The Box Pro Labs, is a welcome addition - but this is a defensive role, not a full-time penetration testing position.
Unser Angebot
- Work-Life-Balance: Flexible hours, work-from-home options from Austria.
- Career growth: We believe in continuous learning and proactive career development.
- Take on challenging work that stretches your abilities, attend trainings, and use new technologies to make a lasting impact.
- Stay healthy: Subsidized canteen, well-being programs, check-ups, and sport allowances.
- Save money: Discounts, exclusive banking terms, and a free public transport pass.
- Family support: Child allowances, gender-neutral parental leave, bilingual company kindergarten, and holiday childcare.
Benefits
Gesundheit, Fitness & Fun
Work-Life-Integration
Mehr Netto
Essen & Trinken
Themen, mit denen du dich im Job beschäftigst
Job-Standorte
Das ist dein Arbeitgeber
Die RBI ist in Österreich als führende Bank tätig und betrachtet auch Zentral- und Osteuropa (CEE) als ihren Heimmarkt. In CEE verfügt sie über ein engmaschiges Netzwerk an Tochterbanken, Leasinggesellschaften und einer Reihe von spezialisierten Finanzdienstleistungsunternehmen in 17 Märkten.
- 250+ Mitarbeitende
- 2010
- Englisch
- Etablierte Firma
- Onsite, Hybrid, Full Remote
- Banken, Finanz, Versicherung
Arbeitgeber-Reviews
- Karriere
- 4,0
- Teamkultur
- 4,4
- Arbeitsbedingungen
- 4,7
- Engineering
- 3,6
Weitere Jobs
Diese Jobs könnten dich auch interessieren
End-to-End Entwicklung: Du begleitest spannende Softwareprojekte von der ersten Anforderungsanalyse über die Implementierung (zB mit Spring Boot) bis hin zum erfolgreichen Deployment. Microservices & Architektur: Du konzipierst und entwickelst...
Wir sind ein modernes IT-Dienstleistungsunternehmen und betreuen Firmenkunden in allen Bereichen der IT-Infrastruktur - von Arbeitsplatzsystemen über Server, Netzwerke, Firewalls bis hin zu Cloud-Lösungen. Zur Erweiterung unseres Teams suchen wir 1...
Wir sind einer der führenden europäischen Hersteller innovativer Biomasse-Heizsysteme (Scheitholz, Hackgut, Pellets). Aufgrund der starken Nachfrage nach unseren Produkten und der exzellenten Zukunftsaussichten für „Erneuerbare Energien“ verstärken wir...
