MOIA GmbH
Mobility
(Senior)Detection&ResponseLead
Neural analysis suggests this role is
optimal for Senior candidates.
“(Senior) Detection & Response Lead at MOIA GmbH. Skills: Detection engineering, Incident response, SIEM strategy. Build Security Operations Center capability. Shape SIEM strategy”
What You'll Achieve.
Reduce real risk
Industry & Context.
Root cause analysis
Remote work outside Germany (6 weeks/year)
What They're Looking For.
Must Have
Several years of experience in security operations, Detection engineering experience, Incident response experience, Cloud security experience, Security engineering role experience, Hands-on SOC building experience, Hands-on SIEM building experience, Hands-on incident response building experience, Hands-on SOC maturing experience, Hands-on SIEM maturing experience, Hands-on incident response maturing experience, Experience writing detection rules, Experience writing correlation logic, Experience writing investigation queries, Solid knowledge of cloud-native environments, Business-level fluency in English
Nice to Have
Experience with SOAR, Detection-as-code experience, Security data lakes experience, Scalable log retention strategies experience, AppSec background, Product security background, Cloud forensics background, Vulnerability management background, Experience in regulated environments, Experience in mobility environments, Experience in automotive environments, Experience in safety-critical environments, Previous hiring involvement, Previous mentoring involvement, Previous team building involvement, German language proficiency
What You'll Do.
Build Security Operations Center capability
Establish detection and response processes
Create foundation for Detection & Response team
Define security operations scaling
Own detection and response capability
Turn risks into operations
Own SIEM strategy implementation
Prioritize log sources
Develop threat-informed detections
Create incident response playbooks
Improve triage processes
Improve investigation workflows
Improve post-incident learning
Lead security investigations
Coordinate response activities
Define detection and response maturity measurement
Evaluate security tooling
Steer external partners
Translate insights into use cases
Establish best practices
Prepare future team setup
How You'll Work.
Team & Collaboration
AppSec & Cloud Security team; Application security experts; Cloud security experts; Engineering experts; Platform experts; IT experts; Compliance experts; Cross-functional stakeholders; Engineering stakeholders; Platform stakeholders; IT stakeholders; Legal stakeholders; Privacy stakeholders; Communication stakeholders
Communication Scope
Communicate under pressure
Full Job Description
Join us as a (Senior) Detection & Response Lead (all genders) in our AppSec & Cloud Security team on a shared journey that matters! At MOIA, trust in our digital and autonomous mobility platform starts with the ability to detect, understand, and respond to security threats before they can impact our services, customers, or teams. To strengthen our security capabilities, we are looking for a (Senior) Detection & Response Lead (all genders) to build MOIA’s Security Operations Center capability from the ground up. You will shape our SIEM strategy, establish detection and response processes, and create the foundation for a future Detection & Response team. Initially, you will be embedded in our AppSec & Cloud Security team, working closely with experts across application security, cloud security, engineering, platform, IT and compliance. Over time, you will define how security operations scale at MOIA - from tooling and playbooks to operating models, escalation paths, and team setup. Your role at MOIA As a (Senior) Detection & Response Lead, you will take end-to-end ownership of MOIA’s detection and response capability. You combine hands-on security engineering with strong incident leadership and the ability to turn ambiguous risks into practical, scalable operations. This is a senior individual contributor role with high visibility and a clear path to shaping a dedicated team as the function matures. What you will do Build MOIA’s Security Operations Center capability, including scope, operating model, responsibilities, escalation paths, and success metrics. Own the SIEM strategy and implementation, including log source prioritization, data quality, detection logic, alert workflows and long-term maintainability. Develop threat-informed detections across cloud, application, identity, endpoint, CI/CD and infrastructure environments. Create and continuously improve incident response playbooks, triage processes, investigation workflows and post-incident learning. Lead secur
Applying for this (Senior) Detection & Response Lead role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Greenhouse
- Create a Greenhouse profile before applying — it saves time across multiple applications.
- Upload your resume as a PDF; the parser handles it better than Word.
- Answer all knockout questions carefully — wrong answers auto-reject before a human sees you.
- Enable email notifications to track application status in real time.
ANONYMOUS · UNFILTERED
What do employees actually say about MOIA GmbH?
Real rants from real employees. Read before you apply.