Corporate Information Technology (CIT) is the central part of the company’s strategy, developing and implementing innovative security solutions to enhance efficiency and competitiveness in the Carl Zeiss Group. By working closely with various business units, CIT ensures that technological advancements and digital transformations are seamlessly integrated into business processes.

Your Role

In this role, you are a senior technical expert within the Cyber Defense Center and a core member of the Cybersecurity Incident Response Team (CIRT). You support the effective handling of cybersecurity incidents by contributing deep technical expertise, structured analysis, and reliable execution throughout the incident response lifecycle.

Your main responsibilities include:

• Acting as a permanent member of the Cybersecurity Incident Response Team (CIRT)
• Executing and supporting technical incident response activities, including analysis, containment, and recovery
• Escalating critical technical findings and risks to the Incident Commander
• Supporting the Incident Commander and Incident Coordinators in the technical execution of incident response activities
• Providing technical guidance and expertise to other IR roles
• Collaborating closely with Digital Forensics and Threat Intelligence teams to enable in-depth technical analysis
• Performing and reporting root cause analysis, incident status, and potential response measures
• Supplying accurate technical input for internal communication and external reporting to authorities via the Incident Commander
• Ensuring complete and structured documentation of all incident response activities

Your profile:

• Several years of professional experience in cybersecurity incident response, SOC, DFIR, or cyber defense environments

• Strong technical knowledge of IT infrastructures, networks, operating systems, and cloud environments

• Proven experience in handling complex or high-severity cybersecurity incidents

• Solid understanding of attacker Tactics, Techniques, and Procedures (TTPs) and the ability to identify, analyze, and respond to them in real-world incidents

• Experience mapping observed activity to frameworks such as MITRE ATT&CK and deriving response or mitigation measures

• Sound understanding of established incident response frameworks (e.g. NIST, SANS)

• Ability to communicate technical findings clearly and concisely to different stakeholder groups

• Structured, reliable, and resilient working style, particularly in critical situations

• Fluent in English; German is a plus.

What we offer:

Our employees are the innovative backbone and driving force of our company. That is why you are our focus.

• Technology stack: Modern and cutting-edge technology stack with opportunities to experiment and innovate within a high-tech group
• Flexible work options: 40-60% hybrid work option to provide flexibility and work-life balance
• Additional benefits: Annual flexible benefits that include cafeteria options, private health plans, and annual reward
• Extra option: Company parking space in the underground garage of the office building can be reserved
• Contribution: Opportunity to directly contribute to the development of innovative products through software delivery
• Supportive work environment: working in a team composed of excellent teammates and a supportive lead who collaborate to guide and support professional development from day one.

At ZEISS we encourage creative thinking and innovation. We work in dynamic and interdisciplinary teams and offer individual development perspectives and flexibility in organizing your work. We care about our employees and take responsibility for improving society and preserving our environment. These core values have shaped our corporate culture at ZEISS for over 175 years.

Join our inclusive and diverse #teamZEISS and enable the digital future for ZEISS and our synergy clients.

The application process takes less than 10 minutes, seize the moment.

Your ZEISS Recruiting Team:

Bartha Györgyi, Fedor Fanni, Sztaskó Daniella