Threat Detection & Response (TDR) Team Lead (f/m/x)

DB Global Technology is Deutsche Bank’s technology centre in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.

We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.

Role Intro

We are seeking a highly skilled and experienced Threat Detection and Response (TDR) Team Lead to join our dynamic Cyber Threat Operations Center (CTOC) in Bucharest. The TDR Lead will be responsible for overseeing and guiding the daily operations of our Bucharest TDR team, supporting EMEA TDR, ensuring the effective detection, analysis, and response to security incidents. This role requires a strong technical background in cybersecurity, excellent leadership abilities, and a deep understanding of threat landscapes relevant to the financial industry. The successful candidate will play a critical role in protecting Deutsche Bank's assets, data, and reputation from evolving cyber threats.

Key Responsibilities

• Team Leadership & Development: Lead, mentor, and manage a team of TDR Analysts and Security Incident Managers, fostering a high performance and collaborative working culture. Responsibilities include conducting performance reviews, managing scheduling, and providing expert escalation support.
• Incident Response & Management: Oversee the comprehensive incident response lifecycle, from initial detection and analysis through to containment, eradication, and recovery. Ensure timely and accurate reporting, effective containment strategies, and accurate post-incident documentation.
• Stakeholder Engagement & Expertise: Act as a primary subject matter expert for security operations, collaborating effectively with internal teams (e.g.  DLM & IRM, Threat Intelligence, ATAI, DDA & UCF) to ensure a cohesive security posture.
• Continuous Improvement & Optimization: Drive a culture of continuous improvement within the global Threat Detection and Response (TDR) team. Proactively assess and enhance SOC processes, workflows, and documentation to maximize efficiency and effectiveness.
• Information Security Threat Operations Enhancement: Support initiatives to optimize Information Security Threat Operations (ISTO), including refining SIEM use cases, implementing advanced detection methodologies, analyzing security events across various tools (e.g., EDR, Firewalls, IDS/IPS), and evaluating/introducing new security technologies.

Most Relevant Skills

• Experience: 6+ years in cybersecurity, and 2+ years in a leadership/senior role.
• Methodologies & Processes: Solid understanding of attack methodologies (MITTRE ATT&CK , Cyber Kill Chain), and highly experienced with Security Incident Management.
• Tech Skills: Good understanding of network protocols, security logs, and familiar with EDR, XDR, SIEM and Cloud Security Concepts.
• Exceptional leadership, analytical, and problem-solving abilities. Excellent communication and ability to work under pressure.
• Always a plus: CISSP, CISM, GCIH/GIAC, CompTIA Security+ or other relevant certifications in the field.

Well-being & Benefits

Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.

• Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.
• A professional, passionate, and fun workplace.
• A modern office with fun and relaxing areas to boost creativity.
• Continuous learning culture with coaching and support from team experts.
• A culture where you can openly speak about mental health.

Physically thriving: We support you managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-up's.

Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.

• 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).
• Hybrid working model with flexible working options
• Enjoy retailer discounts, cultural and CSR activities, workshops, and more.

Financially secure: We support you to meet personal financial goals during your active career and for the future.

• Competitive income, performance-based promotions, and a sense of purpose.
• Meal vouchers, bonuses for referrals

Interested in more: discover what our employees value in the Well-being & Benefits hub!

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.