Skip to content

Deutsche Bank

Information Security Analyst (f/m/x)

Deutsche Bank is hiring an Information Security Analyst (f/m/x) in Bucharest, Romania. Level rates it ; you can apply on Deutsche Bank.

Level's read on this job

  • Level rates this cybersecurity role Little AI ●○○○: aI is not part of the work.
  • Tools and skills the posting cites include Google Cloud Platform, SIEM and Soar.
  • Level classifies it as a mid-level role.
  • Level lists 1,100+ other open roles at Deutsche Bank.

AI in this role

Detecting cyber threats and building SIEM/SOAR rules and automation playbooks for cloud workloads on Google Cloud Platform.

Google Cloud PlatformSIEMSoarGoogle Secops
fine-tuninginformation-securitycyber-threat-detectioncloud-securitythreat-hunting

Job Description:

DB Global Technology is Deutsche Bank’s technology center in Central and Eastern Europe. Since its set-up in 2013, Bucharest Technology Centre (BEX) has constantly proven its capacity to deliver global technology products and services, playing a dynamic role in the Bank’s technology transformation.

We have a robust, hands-on engineering culture dedicated to continuous learning, knowledge-sharing, technical skill development and networking. We are an essential part of the Bank’s technology platform and develop applications for many important business areas.

Integrated in Deutsche Bank’s Chief Security Office (CSO), the Information Security Threat Operations team is responsible for mitigating these risks. The Information Security Threat Operations team enables the business of Deutsche Bank by providing agile security operational capabilities.

You will be responsible for the full range of tasks associated with the detection of cyber threats in a fast-paced environment for Deutsche Bank’s cloud workloads, especially on the Google Cloud Platform stack, using cloud based SIEM/SOAR solutions. Our Cloud Operations team is focused on helping develop Deutsche Bank’s new cloud architecture, platforms/systems, organizational and operational processes to allow for the detection of cyber threats. Once established the focus will shift stronger into the development to detect new threats and perform threat hunting while incorporating change in an evergreen cloud environment.

This will involve maintaining a close dialogue with various units and stakeholders for the purpose of detecting and assessing potential risks to critical business infrastructure and services.

Responsibilities

· You will be expected to be able to identify areas for improvement and take accountability to drive security topics forward within and outside the team

· In this role, you will also contribute to the development of Security Information and Event Management (SIEM) content, focusing on the Google Cloud Platform stack (Google SecOps, Security Command Center, etc.) including detection use cases, automation playbooks, reports, network and asset model management, dashboards, rules/logic, documentation, and process establishment

· Collaborate with other security specialists and experts to support the architecture, design and implementation of services and processes to support our mission of detecting cyber threats

· Work in close cooperation with Cyber Intelligence, Incident Response, and the Security Operations Centre for the purpose of extending and strengthening the division’s capabilities relating to threat analytics for cloud service

This will include managing and overseeing a range of sophisticated tools and services aimed at detecting cyber threats/incidents and responding to them in a determined manner

Skills

  • Minimum 1 years hands-on experience with GCP or alternatively MS Azure / AWS with focus on security services from one of the beforementioned cloud providers.
  • Having at least 6 months experience in developing, modifying, enhancing, and fine-tuning detection and alerting/threat hunting use-cases in any type of SIEM solution (Splunk, LogRhythm, QRadar, Sentinel, SecOps) and understanding of industry wide known detection query languages: KQL, Sigma, YARA, YARA-l, SPL, etc.
  • Familiarity with Cyber Security Incident Response or computer forensic processes, or a strong interest and capability to learn the fundamentals of security operations within a short time.
  • Experience with assessment, development, implementation, optimization, and documentation of a comprehensive and broad set of security technologies and processes (secure software development /Application Security, data protection, cryptography, key management, identity and access management, network security) within SaaS, IaaS, PaaS, and other cloud environments
  • Have at least 2 years’ work experience in the fields of either: Encryption; IAM (Identity & Access Management), Security Monitoring & Incident Response, Network Security, Pen Testing, Security Operation, Application Security

Proven ability to leverage AI tools to enhance productivity, optimise workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs.

Well-being & Benefits

Emotionally and mentally balanced: We support you in dealing with life crises, maintaining stability through illness, and maintaining good mental health.

  • Empowering managers who value your ideas and decisions. Show your positive attitude, determination, and open-mindedness.

  • A professional, passionate, and fun workplace.

  • A modern office with fun and relaxing areas to boost creativity.

  • Continuous learning culture with coaching and support from team experts.

  • A culture where you can openly speak about mental health.

Physically thriving: We support you in managing your physical health by taking appropriate preventive measures and providing a workplace that helps you thrive. For example, Private healthcare and life insurance with premium benefits for you and discounts for your loved ones, healthier ways of working and check-ups.

Socially connected: We strongly believe in collaboration, inclusion and feeling connected to open up new perspectives and strengthen our self-confidence and well-being.

  • 24 days holiday, loyalty days, and bank holidays (including weekdays for weekend bank holidays).

  • Hybrid working model with 40% remote work.

  • Options for flexible working hours.

  • Enjoy retailer discounts, cultural and CSR activities, workshops, and more.

Financially secure: We support you in meeting personal financial goals during your active career and for the future.

  • Competitive income, performance-based promotions, and a sense of purpose.

  • Meal vouchers, bonuses for referrals

Interested in more: discover what our employees value in the Well-being & Benefits hub!

We strive for a culture in which we are empowered to excel together every day. This includes acting responsibly, thinking commercially, taking initiative and working collaboratively.

Together we share and celebrate the successes of our people. Together we are Deutsche Bank Group.

We welcome applications from all people and promote a positive, fair and inclusive work environment.

How we rate this

Information Security Analyst (f/m/x) at Deutsche Bank rates 0 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

  1. ●●●● Builds AI80 to 100
  2. ●●●○ Works on AI60 to 79
  3. ●●○○ Uses AI40 to 59
  4. ●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.

Prepare for this job

Built from this posting and from similar jobs on Level.

Skills and AI tools this role asks for

Fine-tuningInformation SecurityCyber Threat DetectionCloud SecurityThreat HuntingGoogle Cloud PlatformSIEMSoar

Also common in cybersecurity jobs at this level

Pay

Typical cybersecurity job
$160k

This posting doesn't list pay. Use the typical cybersecurity figure when pay comes up. See cybersecurity jobs

Questions you could be asked

  1. Walk me through fine-tuning a model: what data did you use, and how did you check the result?
  2. Tell me about a project where information security was part of your work. What did you do?
  3. Tell me about a project where cyber threat detection was part of your work. What did you do?
  4. Tell me about a project where cloud security was part of your work. What did you do?
  5. Tell me about a project where threat hunting was part of your work. What did you do?

Adapt your resume

  • List these exact terms on your resume: Fine-tuning, Information Security, Cyber Threat Detection, Cloud Security, and Threat Hunting. An applicant tracking system matches the wording, not the idea.
  • Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.

Get your CV reviewed before you apply

Send your CV and the role you want next. Your review arrives by email within 3 days.

Get new cybersecurity jobs by email

One email a week, each job rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.

Free.

Similar roles

Security roles that involve little AI, at other companies.

What kind of AI work fits you?

Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.

Find my next step

More jobs at Deutsche Bank

More cybersecurity jobs

Related searches

Same AI level

Jobs by city