About this role

We are Covestro. We are curious. We are courageous. We are colorful. We refine chemical material solutions with game-changing products. Let us empower you to push boundaries. Join us and our 18.000 colleagues now and together we will make the world a brighter place.

Do you want to do more than just defend against attacks – do you want to understand them, anticipate them, and stop them at the root using cutting-edge AI technology? Then this position is exactly what you're looking for.

At Covestro's Cyber Defense Center, you'll actively shape the next generation of our security architecture: cloud-native, highly automated, AI-powered – with direct visibility up to the Executive Board. You'll work in an international environment, lead virtual teams, make strategic decisions, and leave a real mark in one of the most exciting fields in cybersecurity.

In addition to our diverse benefits, a full-time position comes with an attractive starting salary between €104,800/year and €127,100/year plus a variable component. The starting salary depends on your qualifications and professional experience.

What you can expect from us :

- You independently develop and implement a cloud-native security strategy that detects, defends against, and automatically contains AI-powered attacks of high frequency and intensity
- You take ownership of the comprehensive automation of Cyber Defense response mechanisms – including integration into the existing XSOAR platform and development of automations via Python/Bash
- Detection Engineering is your craft: you develop and tune detection rules for identity-based attacks – from account takeover and privilege escalation to JWT manipulation and compromised service accounts
- As a technical lead, you manage a global, interdisciplinary virtual team in establishing and advancing AI-based defense methods, coordinating regularly with locations in the US and Asia
- You present AI-based detection and response strategies as well as SOC automations at executive level – clearly, convincingly, and to the point
- You take full ownership of Identity Threat Detection & Response (ITDR): automated credential rotation, session termination, and access revocation workflows stop AI-powered attacks before they escalate
- You collaborate as an equal partner with other Covestro operational teams to respond to and effectively resolve serious cybersecurity incidents

What you bring to the table :

- Completed Master's degree or equivalent (Diplom) in Computer Science, ideally with a focus on Cyber Security or a comparable field
- Extensive professional experience (7+ years) in IT Security, Cyber Defense, or OT Security – with a relevant portion in cloud-native environments (AWS and/or Azure)
- Solid technical expertise in Detection Engineering, SOAR platforms (particularly XSOAR, Microsoft Sentinel), CNAPP/CSPM tooling (e.g. Wiz, Prisma Cloud, CrowdStrike), and container security
- Demonstrated skills in automation using Python and/or Bash as well as in developing cloud-native response workflows via cloud provider APIs
- Comprehensive knowledge of current attack techniques and trends, particularly identity-based attacks, Zero Trust, MITRE ATT&CK for Cloud, and modern AI-driven attack vectors
- Strong communication skills at all levels: you translate complex technical findings into risk-oriented language – whether addressing teams or the board
- Excellent English skills (written and spoken) for daily collaboration in an international environment; good German language skills are an advantage

This position requires international collaboration with locations in the US and Asia – intercultural communication competence and flexibility in scheduling across time zones are expected.

This position is generally to be filled on a full-time basis. Would you like to work part-time? Feel free to apply in that case as well, stating your desired percentage.

For initial questions, Chris Rziha ( [email protected] ) is happy to help. Please do not use this email address to send your application or CV. To apply, please click the "Apply" button. Applications submitted by email will not be considered.

#LI-Hybrid

Perfection? Not required!

The requirements are not met 100%, but you are still interested in the position? Are you curious, courageous and colorful as we are? No problem!

We'll tackle this together - as a team! With proper onboarding and tailored development opportunities.

Apply now!

We look forward to receive your application! Become #1ofUs!

Anyone who wants to contribute to a better world with Covestro can also expect a lot.

We want you to feel at home at Covestro. To feel you’re treated fairly and transparently. That means financial security, a healthy work-life balance and generous benefits.

Specifically, it means for us: flexible working hours, the compatibility of family and work, active health promotion and the ability to convert part of your salary into long-term or retirement savings. And that's not all.

Sounds exciting? Find out more about Covestro and our benefits here:

https://www.career.covestro.de/de/about-covestro/covestro-as-an-employer/employee-benefits

Covestro welcomes applications from all individuals, regardless of racial or ethnic origin, skin color, nationality, religion, philosophy, gender, age, physical characteristics, marital status, disability, appearance, sexual orientation and sexual identity. We are committed to treating all applicants fairly and avoiding discrimination.