Teamlead (f/m/d) IT Security - Security Operations Center (SOC)
Reference No.: GF 2026/11
Are you interested in how research centres can effectively protect their IT systems without restricting research? Would you like to set up a new Security Operations Centre (SOC) and play a key role in shaping its structures, processes and technologies?
Then join our team at the Helmholtz-Zentrum Berlin (HZB). We conduct research into solutions for a sustainable future and operate BESSY II, an internationally used synchrotron radiation source. Our diverse range of scientific and administrative IT systems place particular demands on cyber security. To meet these challenges, we are in the process of setting up a SOC. You will take the lead in setting up the SOC and ensuring it transitions to reliable operation. In doing so, you will work independently whilst coordinating closely with the administrative and scientific IT teams, as well as our IT security officer. You will report directly to the Administrative Director.
We are looking for someone who combines conceptual thinking with pragmatic implementation, enjoys working across disciplines and takes pleasure in shaping new initiatives. Wherever possible, we rely on open-source solutions and benefit from collaboration within scientific networks.
Your Tasks
- Leading the SOC team, including staff planning, role allocation and staff development
- Designing and establishing the SOC’s organisational structures, responsibilities and interfaces
- Planning and managing the development of the SOC, including priorities, milestones, resources and decision-making documents
- Developing and implementing processes for security monitoring, alarm handling, escalation and incident response, including appropriate playbooks and runbooks
- Gradually transitioning SOC capabilities into routine operations and continuously reviewing their effectiveness in a research environment
- Coordination of the handling of security incidents, involving external forensic experts where necessary
- Collaboration with international research organisations, as well as the development of suitable in-house training and awareness-raising programmes
Your Profile
- A Master’s degree in Computer Science or Natural Sciences with practical experience in IT security; experience in a research environment would be an advantage
- Ability to build teams, structures and processes, and to find practical solutions to complex requirements
- In-depth practical knowledge of IT security, in particular network and system security, security architectures, and identity and access management
- Knowledge of relevant security standards and frameworks, such as BSI Grundschutz, ISO 27000 and NIST CSF
- Ideally, experience in the design, set-up or operation of a SOC, including incident response processes, alert management and escalation procedures
- Practical experience with SOC technologies such as SIEM, IDS/IPS, EDR, threat intelligence and vulnerability management, as well as relevant frameworks such as MITRE ATT&CK, is desirable
- Excellent command of German and English, as well as strong decision-making skills, the ability to take the initiative and the capacity to communicate complex issues in a manner appropriate to the audience
What we offer
- Contribute to innovation: collaborate with researchers from around the world on projects that drive forward renewable energy and advanced technologies
- Attractive terms and conditions, including pay in line with the TVöD Bund collective agreement and 30 days’ annual leave
- Flexible working conditions: a 39-hour week with flexitime, part-time work and hybrid working
- Extensive additional benefits such as professional development, career-enhancing networks, a company pension scheme (VBL), a subsidy towards the ‘Deutschlandticket Job’, company sports programmes, and personalised support services to help balance work and private life
- Colleagues who are looking forward to working with you and supporting you!
Fixed term contract for 36 months. The salary is based on the Collective Agreement for the German Public Service (TVöD-Bund).
How to apply
Conversion to a permanent contract is generally possible and will be sought by the HZB if the candidate is suitably qualified.
We look forward to receiving your application via our application management system by 19.11.2026. For reasons of data protection regulations, we are unfortunately unable to consider applications that reach us by any other means (such as email or mail) in the application process.
We very much want our workplace to be diverse, and welcome applications from people with different backgrounds. It is our mission to promote equal opportunities and to improve women’s representation in the workforce. We are therefore very interested in receiving applications from women. Where the qualifications are met, we will give preference to people with disabilities.
For German version, please click on the following link: German Version.
➜ APPLY HERE
