Exasol’s Analytics Engine accelerates insights from the world’s data. It is purpose-built to handle the most demanding data workloads at an unmatched price/performance ratio. Our in-memory, massively parallel processing (MPP) technology is specifically designed for analytics, enabling businesses to turn data into actionable insights.
At Exasol, we are committed to pushing the boundaries of what is possible in data analytics, and we are looking for enthusiastic individuals to join our team and help shape the future of data technology. Join our diverse, remote-first team where more than 30+ languages (and counting!) are spoken, and every voice is valued. We are looking for passionate individuals who thrive on collaboration, innovation, and a shared commitment to help shape the future of data technology.
As Security Operations Manager, you will play a key role in Exasol’s Information Security team, protecting our high-performance analytics platform, our cloud environments and the data our customers trust us with. Exasol operates in a regulated European environment. You will help ensure our security operations meet the requirements of ISO 27001, NIS2, DORA, the Cyber Resilience Act, and GDPR.
Working closely with the Team Lead Information Security, you will help deliver the team’s objectives and key results (OKRs) and bring our information security strategy to life. Your main focus is Security Operations. That covers day-to-day operations such as alert triage, security investigations and incident handling, alongside driving improvements in vulnerability management, threat detection, cloud and AI security. You will also support Governance, Risk & Compliance (GRC), giving you broad exposure across the security function.
This is a hands-on role for someone who enjoys solving technical problems from analysis to implementation. You take ownership of your topics, plan ahead, and keep the team and stakeholders informed so we can achieve our goals together.
Responsibilities and Main Duties:You will take on a leadership role in driving and continuously improving Exasol’s security operations capabilities across cloud, infrastructure, endpoint, and SaaS environments within regulated European operating environments. This includes, but is not limited to:
• Handling day-to-day security operations, including alert triage, investigations, and security tickets.
• Leading incident response as the primary escalation point for complex or high-impact incidents, including classification, regulatory notification and post-incident reporting, and continuously improving incident procedures and playbooks.
• Strengthening threat detection by operating and tuning our SIEM, EDR/XDR and related platforms, onboarding log sources, building detections mapped to MITRE ATT&CK and leading threat intelligence activities.
• Driving vulnerability management and penetration testing, from risk-based prioritization through to verified remediation.
• Enhancing cloud security posture and conducting risk-based security reviews of new tools, integrations and architecture changes.
• Helping secure Exasol’s journey to becoming AI-native, including the safe adoption of AI tools and agents, governance of AI usage, and addressing emerging AI-specific threats.
• Contributing to data loss prevention initiatives (DLP) and other security initiatives from planning to delivery.
• Supporting governance, risk and compliance activities, including security controls, risk assessments, and ISO 27001 audits.
• 7+ years of hands-on security operations experience, with a track record of implementing controls, integrations and detections.
• Strong hands-on SIEM and EDR/XDR experience, including log source onboarding, detection engineering with MITRE ATT&CK, and threat intelligence.
• Proven end-to-end vulnerability management, from identification to verified remediation.
• Hands-on experience securing public cloud environments using native cloud security services.
• Practical NIS2 incident handling experience; ideally also DORA, Cyber Resilience Act or GDPR reporting, and direct contact with European regulators.
• Sound security judgement and ownership mindset (continuously improving processes).
• Calm and professional under pressure, open to feedback and keen to learn.
• Strong relationship-building and clear communication with technical teams and senior stakeholders.
• Interest in AI security and in growing your Governance, Risk & Compliance skills, including ISO 27001.
• Fluency in English (must)
• German (Preferred)
This role can be based at Exasol’s Berlin or Nuremberg office. Regular travel to Nuremberg is required. The role follows a hybrid working model, with flexible home office days.
Take the next step in your career journey. Visit www.exasol.com to explore our current job openings, and follow us on LinkedIn to see what it is like to work at Exasol.
Exasol is a proud equal opportunities employer. We are committed to a diverse and inclusive working environment and therefore base all our employment selection decisions, within all aspects of our business, on experience, skill, and integrity. We strongly encourage applicants from all walks to life to apply for our positions, irrespective of age, sex, gender identity, disability, sexual orientation, race, religion, etc.
Skills Required
- At least 7 years of hands-on security operations experience
- Experience implementing security controls, integrations, and detections
- Strong practical experience with SIEM and EDR/XDR
- Experience with log source onboarding and MITRE ATT&CK detection engineering
- Experience with threat intelligence
- End-to-end vulnerability management experience through verified remediation
- Hands-on experience securing public cloud environments using native cloud security services
- Practical experience handling NIS2 incidents
- Sound security judgment, ownership, and continuous process improvement
- Ability to remain calm and professional under pressure
- Openness to feedback and willingness to learn
- Strong relationship-building and communication skills with technical teams and senior stakeholders
- Fluent English
- Experience with DORA, the Cyber Resilience Act, or GDPR reporting
- Direct contact with European regulators
- Interest in AI security and developing Governance, Risk, and Compliance skills, including ISO 27001
- German language skills
What We Do
Exasol’s no-compromise analytics database is developed and driven by a dedicated, expert team that has never, and will never, compromise on quality. We’re redefining how businesses use data, without rip-and-replace disruption. Exasol is the only database to provide increased productivity, cost-savings and flexibility, without any trade-off, so businesses can act on real-time insights to drive competitive advantage. Hundreds of global brands like T-Mobile, Revolut, and Bumble rely on Exasol to innovate, grow and win. And we rely on them too. We do more than just listen to what our customers want from Exasol – we actively work with them to continually shape and improve our product.
