[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"job-endpoint-detection-response-edr3377-allianz-insurance-de-in":3},{"id":4,"slug":5,"title":6,"description":7,"company":8,"is_featured":12,"featured_until":7,"is_active":13,"deactivated_at":7,"is_enriched":13,"processed_job_posting_json":14,"processed_latitude":89,"processed_longitude":90,"processed_employment_types":91,"processed_working_hours":92,"processed_working_hours_labels":94,"processed_home_office":95,"processed_salary_min":86,"processed_salary_max":87,"processed_salary_currency":83,"processed_salary_source":96,"processed_benefits":97,"processed_benefits_labels":102,"processed_industry":103,"processed_skills":7,"processed_job_location":104,"processed_full_address_gmaps":107,"processed_street_gmaps":108,"processed_city_gmaps":109,"processed_postal_code_gmaps":110,"processed_country_gmaps":111,"processed_country_iso_code_gmaps":113,"full_description":17,"formatted_description":114,"processed_employment_types_labels":41,"processed_home_office_labels":39,"processed_industry_labels":43,"processed_it_skills":115,"processed_it_skills_labels":119,"processed_soft_skills":120,"processed_soft_skills_labels":121,"processed_job_expertise_skills":122,"processed_job_expertise_skills_labels":123,"processed_language_requirements":124,"processed_total_experience_years":131,"processed_professional_field":132,"processed_professional_field_labels":134,"processed_leadership_role":12,"processed_date_posted":20,"raw_job_url":135,"apply_url":7,"raw_hiringOrganization_logo_url":7,"translations":7,"canonical_industry_key":136,"canonical_industry_label":137,"max_cpc":138,"actual_cpc":7},91132,"endpoint-detection-response-edr3377-allianz-insurance","Endpoint Detection & Response (EDR)_3377",null,{"name":9,"slug":10,"logo_url":11},"Allianz Insurance","allianz-insurance","https:\u002F\u002Fcdn.phenompeople.com\u002FCareerConnectResources\u002FAISAIPGB\u002Fimages\u002FHeader-1706868786965.svg",false,true,{"@context":15,"@type":16,"title":6,"description":17,"hiringOrganization":18,"datePosted":20,"validThrough":21,"jobLocation":22,"jobLocationType":39,"employmentType":40,"industry":42,"skills":44,"baseSalary":81},"https:\u002F\u002Fschema.org\u002F","JobPosting","\u003Cp>\u003Cstrong>Key Responsibilities\u003C\u002Fstrong>\u003C\u002Fp>\u003Cul style=\"list-style-type: square;\">\u003Cli>Work with red teams to simulate attacks and see if their detection mechanisms work detection platform to analyse EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud\u002FSaaS, etc.)\u003C\u002Fli>\u003Cli>Detect campaigns and attacks against your infrastructure, and identify the actors responsible.\u003C\u002Fli>\u003Cli>Improve and assist in automating the detection of incidents by your SOC.\u003C\u002Fli>\u003Cli>Detect existing APTs in the wild of our systems.\u003C\u002Fli>\u003Cli>Improve your tools (SIEMs, FWs, IDS \u002F IPS, WAFs, EDR) for IOC detection, avoiding false positives.\u003C\u002Fli>\u003Cli>Should have experience in Developing new correlation rules & Parser writing experience in Log source integration\u003C\u002Fli>\u003Cli>Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.\u003C\u002Fli>\u003Cli>Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures\u003C\u002Fli>\u003Cli>Develop and implement threat detection and response strategies to proactively defend against cyber threats.\u003C\u002Fli>\u003Cli>Document and communicate security incidents, vulnerabilities, and remediation efforts to stakeholders.\u003C\u002Fli>\u003Cli>Stay current with the latest cyber threats, attack techniques, and security technologies to enhance detection and response capabilities.\u003C\u002Fli>\u003Cli>Contribute to the continuous improvement of security monitoring and incident response processes and procedures.\u003C\u002Fli>\u003C\u002Ful>\u003Cp>\u003Cstrong>\u003Cspan style=\"list-style-type: disc;\">Qualification\u003C\u002Fspan> \u003C\u002Fstrong>\u003C\u002Fp>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>5+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.\u003C\u002Fp>\u003C\u002Fli>\u003Cli>\u003Cp>Understand digital forensics and incident response as it applies to the cloud \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>3+ years’ experience with Azure\\AWS\\GCP and\\or Kubernetes and containers security. \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and\u002For business intelligence solutions (e.g. SQL, Python, KQL\u002FAzure Data Explorer, Excel, PowerBI, etc.). \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>5+ years’ experience in cyber security, threat detection, and incident response \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Familiarity with backend data structures used for security analysis (JSON, YAML, etc.) \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Experience using query languages and understanding syntax across EDR or other security platforms \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Experience creating and tuning detectors\u002Frules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc. \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Experience using version control software for the deployment of detectors, rules, or other automations (GitHub) \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>5+ years’ experience in cyber security, threat detection, and incident response \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Strong understanding of network security, malware analysis, and security operations \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003C\u002Fdiv>\u003Cdiv>\u003Cul style=\"list-style-type: square;\">\u003Cli>\u003Cp>Familiarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies \u003C\u002Fp>\u003C\u002Fli>\u003C\u002Ful>\u003Cp> \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003C\u002Fdiv> \u003Cp>Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations. \u003C\u002Fp>\u003Cp> \u003C\u002Fp>\u003Cp>Join us\u003Cstrong>. Let's care for tomorrow.\u003C\u002Fstrong>\u003C\u002Fp>",{"@type":19,"name":9},"Organization","2026-10-27","2027-10-27",[23,33],{"@type":24,"address":25,"geo":29},"Place",{"@type":26,"addressLocality":27,"addressCountry":28},"PostalAddress","PUNE","IN",{"@type":30,"latitude":31,"longitude":32},"GeoCoordinates",18.51957,73.85535,{"@type":24,"address":34,"geo":36},{"@type":26,"addressLocality":35,"addressCountry":28},"Sindewahi",{"@type":30,"latitude":37,"longitude":38},20.593684,78.96288,"HYBRID",[41],"PERMANENT",[43],"Insurance and Asset Management",[45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80],"SQL","Python","KQL\u002FAzure Data Explorer","Excel","PowerBI","SIEM","EDR","Firewalls","IDS\u002FIPS","WAF","Azure","AWS","GCP","Kubernetes","GitHub","YARA","SIGMA","Snort","Splunk","Elastic","Communication","Collaboration","Analytical Thinking","Problem Solving","Continuous Learning","Cyber Security","Threat Detection","Incident Response","MITRE ATT&CK","Digital Forensics","Malware Analysis","Network Security","Security Operations","Automation and Orchestration","Log Analysis","Security Process Improvement",{"@type":82,"currency":83,"value":84},"MonetaryAmount","EUR",{"@type":85,"minValue":86,"maxValue":87,"unitText":88},"QuantitativeValue",70000,100000,"YEAR",[31,37],[32,38],"permanent",[93],"FULL_TIME",[93],"hybrid","estimated",[98,99,100,101],"Inclusive workplace","Equal opportunities","Employee empowerment","Growth opportunities",[98,99,100,101],"insurance and asset management",[105,106],"allianz, pune, india","allianz, sindewahi, india",[],[],[27,35],[],[112],"India",[28],"**Key Responsibilities**\n\n- Work with red teams to simulate attacks and see if their detection mechanisms work detection platform to analyse EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud\u002FSaaS, etc.)\n- Detect campaigns and attacks against your infrastructure, and identify the actors responsible.\n- Improve and assist in automating the detection of incidents by your SOC.\n- Detect existing APTs in the wild of our systems.\n- Improve your tools (SIEMs, FWs, IDS \u002F IPS, WAFs, EDR) for IOC detection, avoiding false positives.\n- Should have experience in Developing new correlation rules & Parser writing experience in Log source integration\n- Provide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.\n- Define, create and maintain SIEM correlation rules, customer build documents, security process and procedures\n- Develop and implement threat detection and response strategies to proactively defend against cyber threats.\n- Document and communicate security incidents, vulnerabilities, and remediation efforts to stakeholders.\n- Stay current with the latest cyber threats, attack techniques, and security technologies to enhance detection and response capabilities.\n- Contribute to the continuous improvement of security monitoring and incident response processes and procedures.\n\n**Qualification**\n\n- 5+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.\n- Understand digital forensics and incident response as it applies to the cloud\n\n- 3+ years’ experience with Azure\\AWS\\GCP and\\or Kubernetes and containers security.\n\n- 3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and\u002For business intelligence solutions (e.g. SQL, Python, KQL\u002FAzure Data Explorer, Excel, PowerBI, etc.).\n\n- 5+ years’ experience in cyber security, threat detection, and incident response\n\n- Proven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner\n\n- Familiarity with backend data structures used for security analysis (JSON, YAML, etc.)\n\n- Experience using query languages and understanding syntax across EDR or other security platforms\n\n- Experience creating and tuning detectors\u002Frules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.\n\n- Experience using version control software for the deployment of detectors, rules, or other automations (GitHub)\n\n- 5+ years’ experience in cyber security, threat detection, and incident response\n\n- Strong understanding of network security, malware analysis, and security operations\n\n- Familiarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\n\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.\n\nWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\n\nJoin us**. Let's care for tomorrow.**",{"aws":116,"edr":117,"gcp":116,"sql":116,"waf":116,"siem":117,"yara":116,"azure":116,"excel":118,"sigma":116,"snort":116,"github":116,"python":116,"splunk":116,"elastic":116,"ids\u002Fips":116,"powerbi":118,"firewalls":116,"kubernetes":116,"kql\u002Fazure data explorer":116},3,4,2,[45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],{"communication":116,"collaboration":116,"analytical thinking":116,"problem solving":116,"continuous learning":116},[65,66,67,68,69],{"log analysis":116,"mitre att&ck":117,"cyber security":117,"malware analysis":116,"network security":116,"threat detection":117,"digital forensics":116,"incident response":117,"security operations":116,"automation and orchestration":116,"security process improvement":116},[70,71,72,73,74,75,76,77,78,79,80],{"detected_language_jobad":125,"required":126},"en",[127],[128],{"language":129,"level":130},"ENGLISH","C1",5,[133],"Information and Communications Technology",[133],"https:\u002F\u002Fcareers.allianz.com\u002Fglobal\u002Fen\u002Fjob\u002F108380\u002Fendpoint-detection-response-edr-3377","insurance","Insurance",1]