About Deutsche Telekom Services Europe Romania
In Romania, Deutsche Telekom has set up a Shared Service Center in Bucharest & Timisoara - Deutsche Telekom Services Europe Romania (DTSE Romania), which delivers support function services such as HR, Accounting, Reporting and Finance, as well as IT support services for these lines of business, for the whole European Deutsche Telekom footprint since July 2013.
We are focused on:
- the best customer experiences
- delivering high quality services
- great working conditions
- growing with innovations
- continuously improving competitiveness through digitalization
Key responsabilities:
- Develop and maintain detection rules and use cases across SIEM, EDR, NDR, and cloud security platforms
- Analyze emerging threats and translate them into actionable detection logic
- Improve detection coverage based on threat intelligence, incident trends, and vulnerability exposure
- Monitor security alerts and identify suspicious or malicious activity
- Investigate anomalous events to determine real security threats
- Collaborate with SOC analysts and incident responders to support effective investigations
- Conduct penetration tests and security investigations; produce test reports and develop test automation tools
- Design and perform safety investigations, analyze results, and propose solutions with customers when needed
- Reduce false positives by tuning detection rules and correlation logic
- Contribute to automation projects, building tools for test automation and attack reproducibility
- Track and troubleshoot user issues, tasks, and incidents
- Share industry and technical know-how across teams (knowledge transfer)
- Participate in or manage sub-projects
- Create, review, and maintain documentation, including publishing fixes to the central knowledge base
- Work with global teams to ensure consistent processes and solutions
Tools & technologies:
SIEM
- Microsoft Sentinel
- Splunk Enterprise Security
EDR/XDR
- Microsoft Defender XDR
- CrowdStrike Falcon
Network & Infrastructure Detection
- NDR platforms
- IDS/IPS
- Firewall, proxy, VPN, and network telemetry solutions
Cloud & Identity Security Monitoring
- Microsoft Entra / Azure AD logs
- Microsoft 365 security telemetry
Threat Intelligence & Detection Engineering
- Threat intelligence platforms and indicator feeds
- MITRE ATT&CK mapping and detection use case libraries
- IOC/IOA-based detection content
Experience and skills:
- Bachelor's degree in Information Technology, Computer Science, or a related field
- 5+ years of experience in data leakage analysis, cybersecurity monitoring, detection engineering, or SOC operations
- Strong background in architecting, engineering, and automating security solutions for global environments, with a focus on Data Leakage Solutions
- Proficiency in log analysis and event correlation
- Hands-on experience developing detection rules
- Advanced knowledge of security monitoring tools (SIEM, EDR/XDR, NDR)
- Solid scripting skills (Python, PowerShell, or similar)
- Knowledge of common attack techniques and tactics
- Understanding of network protocols and system behavior
- Familiarity with SIEM integrations
- General knowledge of infrastructure (LDAP, Group Policy, Kerberos, Active Directory, etc.) and networking (routing, firewalls, OSI Model, packet trace and analysis, etc.)
DTSE-RO is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decision at DTSE-RO are based on business needs, job requirements and individual qualifications, with no regard to race, color, religion or belief, national, social or ethnic origin, sex, age, physical, mental or sensory disability, sexual orientation and gender identity.
DTSE-RO will not tolerate discrimination or harassment based on any of these characteristics.
By applying for this job you accept the DT privacy statement:
To process your online application we collect, process and use your personal data. We will treat your data as strictly confidential in accordance statutory provisions.
By submitting your application, you consent to your data being processed electronically, including by third parties. Data is only passed on to HR service providers that have been caefully selected by Deutsche Telekom AG.
For detailed information read the local data protection when applying for a job position at Deutsche Telekom Group.
Your email job alert is now active!