Senior Security Operations Specialist (SOC) - Tires

Continental is a leading tire manufacturer and industry specialist. Founded in 1871, the company generated sales of €19.7 billion in 2025 and currently employs around 78,000 people in 54 countries and markets.  Tire solutions from the Tires group sector make mobility safer, smarter, and more sustainable. Its premium portfolio encompasses car, truck, bus, two-wheel, and specialty tires as well as smart solutions and services for fleets and tire retailers. Continental has been delivering top performance for more than 150 years and is one of the world’s largest tire manufacturers. In fiscal year 2025, the Tires group sector generated sales of 13.8 billion euros. Continental's tire division employs more than 55,000 people worldwide and has 19 production and 16 development sites.   Join our Cyber Defense Center as a Senior Security Operations Specialist and become part of a global team dedicated to safeguarding our organization's people, systems, and data. As a member of our Security Operations Center (SOC) , you will lead the investigation and response to complex cyber threats, drive continuous improvement of detection and response capabilities, and act as a senior escalation point for the SOC team. Using advanced security technologies, threat intelligence, and proactive threat hunting techniques, you will play a key role in protecting our global environment against sophisticated adversaries. Responsibilities • Investigate, validate, and respond to complex security incidents escalated by CrowdStrike Falcon Complete MDR Service, SOC analysts, users, and other IT departments. • Lead investigations of advanced security incidents using CrowdStrike Falcon, Microsoft Defender, SIEM platforms, and other security technologies. • Analyze alerts, suspicious activity, attack patterns, and threat actor behavior using endpoint telemetry, threat intelligence, cloud telemetry, and SIEM data. • Perform advanced root cause analysis , determine attack scope and impact, and provide detailed findings and recommendations. • Lead containment, eradication, and recovery activities for major security incidents. • Conduct proactive threat hunting activities and initiate investigations based on intelligence, emerging threats, and hypothesis-driven analysis. • Coordinate with Incident Response, Infrastructure, Cloud, Identity, and Business teams during major cyber incidents. • Produce high-quality incident reports, executive summaries, lessons learned, and technical documentation. • Collaborate with the Global SOC team and cybersecurity stakeholders to strengthen operational effectiveness and security monitoring maturity. • Lead the development, optimization, and maintenance of incident response playbooks, use cases, and operating procedures. • Stay up to date with emerging cybersecurity threats, attack techniques, adversary tradecraft, and security technologies. • Develop and tune detection rules , analytics, and correlation logic to improve SOC visibility and effectiveness.  • Perform advanced threat modeling and map detections to the MITRE ATT&CK framework. • Mentor junior and mid-level SOC analysts and provide technical guidance during investigations. • Act as a senior escalation point for high-severity incidents and provide incident leadership during major cyber events. • Identify security gaps , recommend strategic improvements, and drive implementation of detection and response enhancements. • Support purple-team exercises, tabletop exercises, and adversary emulation activities to validate security controls. • Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field. • 5+ years of experience in Security Operations, Incident Response, Threat Hunting, or a related cybersecurity role. • Proven experience investigating and managing complex cyber incidents in enterprise environments. • Strong hands-on experience in security monitoring operations, incident investigation, and enterprise detection technologies. • Strong understanding of attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain. • Strong understanding of security frameworks and standards such as NIST, ISO 27001, CIS Controls, and incident response best practices. • Advanced knowledge of Windows operating systems, Active Directory, Entra ID , networking, and enterprise security architectures. • Extensive experience with CrowdStrike , Microsoft Defender , SIEM platforms, EDR/XDR solutions and cloud security technologies. • Experience developing detection logic, threat hunting hypotheses, and security monitoring use cases. • Experience performing malware triage, attack chain analysis, and forensic investigations. • Understanding of cloud security concepts across Microsoft Azure , AWS and Microsoft 365 environments. • Experience with scripting or automation using PowerShell, Python, KQL, or similar technologies, is a plus. • CrowdStrike certifications such as CCFA, CCFR, or CCFH are considered an advantage. • Advanced cybersecurity certifications such as GCIA, GCIH, GCFA, GCFE, CISSP, SC-200, or equivalent are considered an advantage. • Strong analytical and problem-solving skills. • Strong communication and collaboration skills. • Ability to work independently and as part of an international team. • Demonstrated ability to lead technical investigations and drive cross-functional collaboration during major security incidents. • Passion for cybersecurity and a willingness to continuously learn and develop new skills. • Fluent in English - min. B2. • 13th salary; • Performance bonus; • Christmas & Easter bonus; • Seniority bonus; • Flexible working time; • Competitive salaries & benefits; • Health & wellness (Life Assurance, Private Health and Dental Insurance, Sport activities, Canteen, 24/7 Helpline with Psychologists etc.); • Different discounts (tires, glasses, medical, shopping, etc.); • Relocation bonus for non-Timisoara Residents