# Cyber Defense Specialist (f/m/x) at Raiffeisen Bank International

Raiffeisen Bank International is hiring a Cyber Defense Specialist (f/m/x). Level rates it Works on AI ●●●○; you can [apply on Raiffeisen Bank International](https://jobsbylevel.com/go/ce35f590-69b0-4a3b-9950-aade3ad95d68?utm_medium=ai-agent).

AI Level 3, AI centrality 63 out of 100. Wien, 1190.

## Details

- Company: [Raiffeisen Bank International](https://jobsbylevel.com/companies/raiffeisen-bank-international)
- AI level: AI Level 3 (score 63 out of 100)
- Location: Wien, 1190
- Posted: October 29, 2026
- Apply: https://jobsbylevel.com/go/ce35f590-69b0-4a3b-9950-aade3ad95d68?utm_medium=ai-agent
- Free CV review for this job: https://jobsbylevel.com/cv-review?job=cyber-defense-specialist-f-m-x-at-raiffeisen-bank-international-8a4b1f

## Description

RBI is fostering its Business by strengthening its information and cyber security capabilities for the next generation. As a crucial part of Raiffeisen Bank International’s Group Cyber Defense Center, this function develops detection and prevention mechanisms to support our digitalization journey and maintain our customers’ confidence. In this position, you will be a member of our Group SOC team. This includes providing effective security monitoring through triage, investigation, communication and reporting. You will be encouraged to conduct your own threat hunting investigations, create and refine detection use cases, and build tactical and strategic mitigation plans that measurably improve our security posture. You will work together with IT and security engineers to onboard bank products and build the cyber security use cases needed to protect them. You will also work hands-on with the AI-assisted and semi-autonomous tooling we are introducing across the SOC, and your judgement will shape how far we take it. What you can expect: Enhance threat intelligence by leveraging technology and information available from both internal and external sources Perform threat management and threat modelling, identify threat vectors, and develop use cases for security monitoring Analyze and assess damage to data and infrastructure resulting from security incidents, examine available recovery tools and processes, and recommend solutions Validate and tune your own detection use cases by safely reproducing attacker techniques in our lab environment — we expect you to know what your rules look like when they fire Take part in purple team exercises with our Adversary Simulation colleagues and turn observed attack behavior into reliable detection logic Review the results of automated attack simulation runs and translate detection coverage gaps into concrete tuning and engineering tasks Where we are going with AI: RBI has its own AI strategy, and we are deliberately building towards an agentic SOC: analysts supported by semi-autonomous processes covering enrichment, correlation, use-case quality assurance, threat hunting support and reporting. We are hiring people who want to shape that, not watch it happen. You will work with AI-assisted triage, hunting and reporting from day one, and your feedback on where it helps — and where it is confidently wrong — will directly steer how we build it You will help develop detection coverage for the bank’s own AI adoption: our monitoring scope now includes AI and LLM workloads, not just traditional infrastructure We would rather you automate your repetitive work than do it twice — contributions to detection-as-code and SOAR playbook development are explicitly part of the role What you bring to the table: Hands-on experience in security monitoring and incident detection within a Security Operations Center Strong understanding of the MITRE ATT&CK framework, the Cyber Kill Chain and other attack models Hands-on experience configuring, maintaining and improving SIEM platforms Practical understanding of how common attack techniques are executed — we value analysts who can reproduce a technique in a lab and recognize the traces it leaves in telemetry, rather than knowing it only from a framework Ability to write Python or PowerShell scripts to automate tasks, enrich security data and validate detections Practical experience using LLM-based tools in your daily work, including effective prompting, recognizing unreliable output and verifying results before acting on them Familiarity with common offensive tools (e.g. BloodHound, Impacket, Mimikatz and C2 frameworks) and the forensic artefacts they leave behind is an asset Experience running ATT&CK-aligned tests using tools such as Atomic Red Team or Caldera, or working with breach and attack simulation platforms, is an asset Experience working with cyber threat intelligence (CTI) platforms is an asset Awareness of security risks associated with AI and LLMs, such as

The description is cut here. Read the full offer: https://jobsbylevel.com/jobs/cyber-defense-specialist-f-m-x-at-raiffeisen-bank-international-8a4b1f

Source: https://jobsbylevel.com/jobs/cyber-defense-specialist-f-m-x-at-raiffeisen-bank-international-8a4b1f

## Cite this page

Level. https://jobsbylevel.com/jobs/cyber-defense-specialist-f-m-x-at-raiffeisen-bank-international-8a4b1f.

Get job alerts: https://jobsbylevel.com/newsletter