YourLiebherrCareer Security Monitoring & Incident Response Product Owner (mfd)

SOC Operations & Service Management

• Own the end-to-end operations of the global SOC ensuring effective collaboration between internal analysts and the MSSP (L1/L2).
• Monitor manage and optimize processes including alert triage escalation flows and incident response handovers.
• Ensure all services related to Security Monitoring and Incident Response to perform against defined SLAs and KPIs and drive actions when service quality deviates.
• Implement the SOC product roadmap related to Security Monitoring & Incident Response including implementation of the strategic vision backlog and prioritization of improvements.

Vendor & MSSP Management

• Act as the primary liaison between the organization and the MSSP to deliver SOC services.
• Conduct recurring service governance meetings (operational and tactical).
• Track and validate MSSP deliverables including detection operations case handling quality and runbook adherence.
• Coordinate improvements to MSSP workflows communication channels and response processes.

Incident Response Alignment

• Align with the internal incident response team to ensure seamless escalation.
• Support the refinement of incident response procedures playbooks and communication guidelines.
• Ensure major incidents are appropriately handled documented and followed by lessons learned sessions.
• Guide the continuous evolution of incident management maturity and readiness.

Governance Compliance & Documentation

• Maintain alignment with internal security frameworks standards and regulatory requirements.
• Produce regular reports on operational performance risks coverage and incident trends.
• Ensure processes runbooks service definitions and operating procedures are consistently documented and kept up to date.
• Support audits assessments and readiness activities related to detection and response.

• Bachelors/Masters in Cybersecurity Computer Science or related field.
• 7 years of operational experience in SOC environments (L2/L3 threat hunting incident response service delivery operational delivery).
• Exposure to global organizations and distributed security functions.
• Knowledge of modern security frameworks (MITRE ATT&CK NIST CSF ISO 27001).
• Experience implementing KPIs and running continual service improvement processes.
• Relevant certifications (e.g. CISSP GCIH CCSP GCIA GMON) are a plus but not mandatory.
• Fluency in English (written and spoken).
• Willingness and ability to travel to Liebherr sites worldwide up to 10% of the time.

At Liebherr we believe people are at the heart of our success. As part of our international team youll enjoy a secure role in a family-owned company that values innovation collaboration and long-term career growth:

• Competitive compensation and benefits package that recognizes your expertise.
• Flexible and hybrid working model.
• Creative freedom and responsibility to shape processes and solutions in our global transformation.
• Continuous learning and development with tailored training and certification opportunities.
• Meal vouchers.
• Life and accident insurance.
• Option to include a premium private health insurance package as part of the flexible remuneration.
• A safe stable and international workplace within a trusted family business that invests in people.

Please only use the online application option.

Please note that we do not accept applications via recruitment agencies for this position.

Have we awoken your interest Then we look forward to receiving your online application. If you have any questions please contact Karoliina Rissanen.

One Passion. Many Opportunities.