Continental
Senior Security Operations Specialist (SOC) - Tires
Timișoara, TM, Romania · Hybrid · Full-time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerContinental
- LocationTimișoara, TM, Romania
- Work styleHybrid
- Employment typeFull-time
- Employer posted
Join our Cyber Defense Center as a Senior Security Operations Specialist and become part of a global team dedicated to safeguarding our organization's people, systems, and data.
As a member of our Security Operations Center (SOC), you will lead the investigation and response to complex cyber threats, drive continuous improvement of detection and response capabilities, and act as a senior escalation point for the SOC team. Using advanced security technologies, threat intelligence, and proactive threat hunting techniques, you will play a key role in protecting our global environment against sophisticated adversaries.
Responsibilities
- Investigate, validate, and respond to complex security incidents escalated by CrowdStrike Falcon Complete MDR Service, SOC analysts, users, and other IT departments.
- Lead investigations of advanced security incidents using CrowdStrike Falcon, Microsoft Defender, SIEM platforms, and other security technologies.
- Analyze alerts, suspicious activity, attack patterns, and threat actor behavior using endpoint telemetry, threat intelligence, cloud telemetry, and SIEM data.
- Perform advanced root cause analysis, determine attack scope and impact, and provide detailed findings and recommendations.
- Lead containment, eradication, and recovery activities for major security incidents.
- Conduct proactive threat hunting activities and initiate investigations based on intelligence, emerging threats, and hypothesis-driven analysis.
- Coordinate with Incident Response, Infrastructure, Cloud, Identity, and Business teams during major cyber incidents.
- Produce high-quality incident reports, executive summaries, lessons learned, and technical documentation.
- Collaborate with the Global SOC team and cybersecurity stakeholders to strengthen operational effectiveness and security monitoring maturity.
- Lead the development, optimization, and maintenance of incident response playbooks, use cases, and operating procedures.
- Stay up to date with emerging cybersecurity threats, attack techniques, adversary tradecraft, and security technologies.
- Develop and tune detection rules, analytics, and correlation logic to improve SOC visibility and effectiveness.
- Perform advanced threat modeling and map detections to the MITRE ATT&CK framework.
- Mentor junior and mid-level SOC analysts and provide technical guidance during investigations.
- Act as a senior escalation point for high-severity incidents and provide incident leadership during major cyber events.
- Identify security gaps, recommend strategic improvements, and drive implementation of detection and response enhancements.
- Support purple-team exercises, tabletop exercises, and adversary emulation activities to validate security controls.
Show full description
- Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.
- 5+ years of experience in Security Operations, Incident Response, Threat Hunting, or a related cybersecurity role.
- Proven experience investigating and managing complex cyber incidents in enterprise environments.
- Strong hands-on experience in security monitoring operations, incident investigation, and enterprise detection technologies.
- Strong understanding of attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
- Strong understanding of security frameworks and standards such as NIST, ISO 27001, CIS Controls, and incident response best practices.
- Advanced knowledge of Windows operating systems, Active Directory, Entra ID, networking, and enterprise security architectures.
- Extensive experience with CrowdStrike, Microsoft Defender, SIEM platforms, EDR/XDR solutions and cloud security technologies.
- Experience developing detection logic, threat hunting hypotheses, and security monitoring use cases.
- Experience performing malware triage, attack chain analysis, and forensic investigations.
- Understanding of cloud security concepts across Microsoft Azure, AWS and Microsoft 365 environments.
- Experience with scripting or automation using PowerShell, Python, KQL, or similar technologies, is a plus.
- CrowdStrike certifications such as CCFA, CCFR, or CCFH are considered an advantage.
- Advanced cybersecurity certifications such as GCIA, GCIH, GCFA, GCFE, CISSP, SC-200, or equivalent are considered an advantage.
- Strong analytical and problem-solving skills.
- Strong communication and collaboration skills.
- Ability to work independently and as part of an international team.
- Demonstrated ability to lead technical investigations and drive cross-functional collaboration during major security incidents.
- Passion for cybersecurity and a willingness to continuously learn and develop new skills.
- Fluent in English - min. B2.
- 13th salary;
- Performance bonus;
- Christmas & Easter bonus;
- Seniority bonus;
- Flexible working time;
- Competitive salaries & benefits;
- Health & wellness (Life Assurance, Private Health and Dental Insurance, Sport activities, Canteen, 24/7 Helpline with Psychologists etc.);
- Different discounts (tires, glasses, medical, shopping, etc.);
- Relocation bonus for non-Timisoara Residents;
- Professional development opportunities (in Technical and Leadership Areas);
- International Work Environment & Traveling Opportunities.
Ready to drive with Continental? Take the first step and fill in the online application.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Work styleHybrid
- Employment typeFull-time
- SeniorityEntry level
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.
Explore similar roles
Similar jobs
Continental
Berufsausbildung Elektroniker für Automatisierungstechnik ab 01.09.2027 (m/w/d) - Tires
Hannover, NDS, Germany