Liebherr Group

Security Engineer

• Implementing and managing security measures across the organization’s network infrastructure
• Ensure security, availability, and integrity of network systems by configuring firewalls, IDS/IPS, and other network security tools
• Deploy VPNs, Network Access Control (NAC) and segmentation strategies
• Implement Zero Trust Network Architecture principles and configure network security devices and systems
• Deploy network security solutions (firewalls, intrusion detection systems, VPNs)
• Enforce network security policies and compliance requirements (ISO, NIST)
• Secure wireless networks, cloud networking and remote access solutions
• Define and automate standards of secure configurations for network devices
• Collaborate with SOC/SIRT and Support on network security incidents and participate in incident response
• Help implement, secure, and evolve the digital backbone of the enterprise

Network Security Engineer

• Develop and enforce application security architecture frameworks, policies, standards, and best practices (e.g. OWASP, NIST, ISO 27001)
• Review and approve application security designs while ensuring secure software development and architecture
• Integrate security into the software development lifecycle (SDLC) by collaborating with development teams and enabling DevSecOps practices
• Adopt and promote a security-by-design approach with different stakeholders
• Conduct threat modeling, security reviews, and risk assessments to proactively identify and mitigate vulnerabilities
• Evaluate, recommend, and oversee security tools and testing solutions (SAST, DAST, IAST)
• Define security strategies for applications (e.g. IAM) and implement security principles such as Zero Trust
• Actively contribute to the Corporate Information Security architecture community, sharing insights and best practices
• Collaborate with IT, EA, DevOps and Engineering teams to align security objectives

Application Security Architect

• Coordinating and executing the response to security incidents, including containment, eradication, and support in recovery efforts
• Conduct digital forensics investigations to analyze compromised systems, gather evidence, and identify the scope and impact of security incident
• Correlate logs, alerts, and IOCs to identify root causes and attack paths
• Create detailed incident reports and executive summaries and Conduct lessons-learned sessions and recommend preventive measures
• Maintain detailed records of incident response activities, findings, and lessons learned to support post-incident reviews and reporting
• Work closely with other members of the SOC/CERT team and cross-functional teams to ensure a comprehensive approach to incident management
• Monitoring security alerts and events to identify potential incidents and escalate them as necessary
• Contribute to the development and refinement of incident response processes, tools, and techniques based on experience and emerging threats

Network Security Engineer

Application Security Architect

Security Incident Manager – Senior Security Incident Responder