Monitoring and analysis of security-relevant events in SIEM, EDR/XDR, Participation in the development and optimization of use cases, correlation rules, playbooks, and alarm logic in the SIEM/SOAR environment, Initiation, coordination, and documentation of incident response measures in cooperation with customers and internal teams, Analysis of log data from various sources (network, systems, applications) to identify attack patterns and vulnerabilities, Creation of situation reports, reports, and management presentations on security incidents and current threat situations, Close cooperation with internal departments (network, infrastructure, applications), Operation of smart card and CA card infrastructures (e.g., employee cards), Knowledge of configuration and administration of PKI/CA systems and their interaction with card management systems, Participation in security concepts, policies, and guidelines for the secure handling of keys and certificates, Creation and maintenance of technical documentation, operating, and emergency manuals