Manager of Global Cyber Defense

About the role

Celonis is seeking a Manager of Global Cyber Defense to lead its Security Operations (SecOps) and Incident Response teams. This global leadership position is the primary architect of the strategies, tools and policies that protect Celonis's enterprise data, corporate infrastructure and cloud-native environments. The role reports to the VP of Information Security.

Key responsibilities

• Recruit, mentor and develop a global team of cyber defense engineers and security analysts.
• Author and maintain enterprise cyber defense frameworks, incident response playbooks and operational blueprints.
• Own the architecture, tooling and daily operations of the Security Operations Center (SOC).
• Oversee the rapid identification, containment and remediation of advanced cyber attacks and vulnerabilities.
• Evaluate and integrate security technologies, focusing on automation (SOAR), telemetry and SIEM optimization.
• Promote threat modeling, breach simulations and tabletop exercises across Engineering, Cloud Infrastructure and IT.
• Partner with internal learning teams to institutionalize security playbooks and upskill teams.
• Establish, track and report cyber defense KPIs to executive leadership.
• Manage the Cyber Defense roadmap within an agile engineering framework.

Required profile

• Proven track record of mitigating advanced persistent threats (APTs) and sophisticated cyber adversaries.
• Bachelor's degree in Computer Science, STEM, or equivalent real-world technical experience.
• Ability to manage technical teams and high-pressure situations, with exceptional English communication skills.
• Strong academic background and demonstrated leadership and drive.

Required skills

• Deep knowledge of SOC design, including logging strategies, network segmentation, cloud telemetry and honeypots.
• Understanding of securing enterprise SaaS platforms and cloud environments (AWS, Azure or GCP).
• Ability to build and automate incident response workflows.
• Familiarity with frameworks such as NIST CSF and MITRE ATT&CK.
• Preferred: red teaming and blue teaming experience, SIEM engineering, CISSP/CISM/GIAC certifications, and global endpoint security experience.

What we offer

• Restricted Stock Units (RSUs) and merit-based refresh grants.
• 24 weeks of fully paid parental leave for primary carers and 12 weeks for supporting carers.
• Unlimited PTO in applicable regions and a flexible hybrid work model.
• Learning framework, mentorship and a dedicated learning platform.
• Wellness support, including Wellhub membership and mental health counseling.