MOIA · Berlin
(Senior) Detection & Response Lead (all genders)
JOIN US AS A (SENIOR) DETECTION & RESPONSE LEAD (ALL GENDERS) IN OUR APPSEC & CLOUD SECURITY TEAM ON A SHARED JOURNEY THAT MATTERS! At MOIA, trust in our digit...
JOIN US AS A (SENIOR) DETECTION & RESPONSE LEAD (ALL GENDERS) IN OUR APPSEC & CLOUD SECURITY TEAM ON A SHARED JOURNEY THAT
MATTERS!
At MOIA, trust in our digital and autonomous mobility platform starts with the ability to detect, understand, and respond to
security threats before they can impact our services, customers, or teams.
To strengthen our security capabilities, we are looking for a (Senior) Detection & Response Lead (all genders) to build MOIA’s
Security Operations Center capability from the ground up. You will shape our SIEM strategy, establish detection and response
processes, and create the foundation for a future Detection & Response team.
Initially, you will be embedded in our AppSec & Cloud Security team, working closely with experts across application security,
cloud security, engineering, platform, IT and compliance. Over time, you will define how security operations scale at MOIA - from
tooling and playbooks to operating models, escalation paths, and team setup.
YOUR ROLE AT MOIA
As a (Senior) Detection & Response Lead, you will take end-to-end ownership of MOIA’s detection and response capability. You
combine hands-on security engineering with strong incident leadership and the ability to turn ambiguous risks into practical,
scalable operations.
This is a senior individual contributor role with high visibility and a clear path to shaping a dedicated team as the function
matures.
WHAT YOU WILL DO
- Build MOIA’s Security Operations Center capability, including scope, operating model, responsibilities, escalation paths, and
success metrics.
- Own the SIEM strategy and implementation, including log source prioritization, data quality, detection logic,
alert workflows and long-term maintainability.
- Develop threat-informed detections across cloud, application, identity, endpoint, CI/CD and infrastructure environments.
- Create and continuously improve incident response playbooks, triage processes, investigation workflows and post-incident
learning.
- Lead security investigations and coordinate response activities with engineering, platform, IT, legal, privacy and
communication stakeholders when needed.
- Define how MOIA measures detection and response maturity, including coverage, signal quality, false positives, MTTD and MTTR.
- Evaluate and steer security tooling and external partners where they help us move faster or operate more reliably.
- Translate Vehicle, AppSec and Cloud Security insights into concrete detection, logging and response use cases.
- Mentor colleagues, establish best practices and help prepare the future team setup for Detection & Response at MOIA.
WHAT WILL HELP YOU TO FULFILL YOUR ROLE
- Several years of experience in security operations, detection engineering, incident response, cloud security or a similar
security engineering role.
- Hands-on experience building or significantly maturing SOC, SIEM or incident response capabilities.
- Strong understanding of SIEM platforms and log pipelines, such as Splunk, Elastic, Microsoft Sentinel, Chronicle, Datadog or
similar.
- Experience writing detection rules, correlation logic and investigation queries using languages such as KQL, SPL, SQL, Sigma or
equivalent.
- Solid knowledge of cloud-native environments, ideally AWS, Kubernetes, serverless architectures, IAM and CI/CD security.
- Ability to lead incidents calmly, communicate clearly under pressure and bring technical and non-technical stakeholders
together.
- A pragmatic engineering mindset: you automate where it helps, document where it matters and focus on reducing real risk.
- Business-level fluency in English. German is a plus.
NICE TO HAVE
- Experience with SOAR, detection-as-code, security data lakes or scalable log retention strategies.
- Background in AppSec, product security, cloud forensics or vulnerability management.
- Experience in regulated, mobility, automotive or safety-critical environments.
- Previous involvement in hiring, mentoring, or building a security team.
We welcome applicants from diverse backgrounds — even if you don’t meet every requirement. If you’re excited about the role and
MOIA’s mission, we’d love to hear from you!
OUR BENEFITS IN A NUTSHELL
- Competitive salary (including bonus)
- Hybrid work setup: Work from home or one of our offices - you and your team decide how often to meet, blending flexibility with
collaboration!
- Flexible working hours and the possibility of flexible work arrangements depending on your needs (parenting, care work,
volunteering, etc.)
- Budget and monthly expense allowance for home office setup
- Possibility of remote work from outside Germany for up to 6 weeks per year from over 35 countries - learn more in our blog!
- Public transport ticket (fully subsidized "Deutschlandticket") for commuting and travelling throughout Germany and discount on
MOIA rides
- Subsidized fitness club membership or bike leasing
- Learning environment with continuous learning days, job rotation, trainings and workshops, coaching, conferences, books, and
language classes
- Mental health support, 1:1 sessions with external professionals and mental unload workshops
- 30 vacation days, sabbatical and unpaid leave option
- Relocation support with service provider (visa, administration, etc.)
- Dog-friendly offices
For student & internship positions, we have an adjusted set of benefits. You can find them here.
BE WHO YOU ARE!
We are a member of Charta der Vielfalt and are dedicated to actively fostering a workplace that celebrates and promotes diversity
in various aspects such as age, gender identity, race, sexual orientation, physical or cognitive ability, and ethnicity. At MOIA,
we embrace a culture where people are accepted, respected, valued, appreciated, and included.
In our commitment to promoting diversity and inclusivity, we regularly provide unconscious bias training to all our employees.
Furthermore, we continuously strive to enhance our hiring process by ensuring a diverse hiring panel.
HOW WE WORK
At MOIA, our teams are typically distributed across our office locations and collaborate in a hybrid setup. We work together both
remotely and on site, choosing the mode of collaboration that fits the context, the work at hand, and each team’s rhythm.
Spending time together in our offices is an important part of how we stay connected, build trust, and solve complex problems. At
the same time, we value flexibility and give teams and individuals autonomy to shape their ways of working, with everyone having
the freedom to organise their routines in a way that aligns with their work and their team’s needs.
If you’d like to learn more about how we work, visit our blog for insights into our culture and hiring process, or follow us on
Instagram for a look behind the scenes at MOIA.
WHO WE ARE
At MOIA we’re reimagining the future of mobility – safe, autonomous and tailored to the needs of cities and their people. As a
tech company with more than 400 employees, we build mobility solutions that truly move cities forward.
We launched our ridepooling service in Hamburg in 2019 and have been part of the city’s public transport system since 2023. Since
launch, we have transported over 12 million passengers. Currently, MOIA is evolving from a mobility provider to a tech provider
offering a scalable and safe turnkey solution for autonomous driving.
With office locations in Berlin and Hamburg, our diverse and international team comprising more than 60 nationalities works
together toward that shared mission.
MOIA is more than a technology provider – we are a partner to cities and public transport operators committed to creating more
livable spaces and delivering mobility solutions that are reliable, safe and comfortable.
YOUR APPLICATION TO MOIA
We value authenticity and personal insights in your application responses. While AI tools can be useful, we encourage you to
answer the following questions based on your own experiences and understanding. This helps us keep a human touch and better
evaluate your unique perspective and match for the role.
To reinforce an unbiased screening process, we kindly ask you not to include your picture, age, address, or any other details
unrelated to your qualifications and suitability for the role. Additionally, we anonymize applications during the initial review
phase by removing personally identifiable information. This ensures that our evaluation focuses solely on your skills, experience,
and potential – supporting a fair and inclusive hiring experience for all candidates.
Roll
(Senior) Detection & Response Lead (all genders)
Kategori
Data/IT
Plats
Publicerad
14 juli
Sista ansökningsdag
16 augusti