Join us as a (Senior) Detection & Response Lead (all genders) in our AppSec & Cloud Security team on a shared journey that matters!

At MOIA, trust in our digital and autonomous mobility platform starts with the ability to detect, understand, and respond to security threats before they can impact our services, customers, or teams.

To strengthen our security capabilities, we are looking for a (Senior) Detection & Response Lead (all genders) to build MOIA's Security Operations Center capability from the ground up. You will shape our SIEM strategy, establish detection and response processes, and create the foundation for a future Detection & Response team.

Initially, you will be embedded in our AppSec & Cloud Security team, working closely with experts across application security, cloud security, engineering, platform, IT and compliance. Over time, you will define how security operations scale at MOIA - from tooling and playbooks to operating models, escalation paths, and team setup.

Your role at MOIA

As a (Senior) Detection & Response Lead, you will take end-to-end ownership of MOIA's detection and response capability. You combine hands-on security engineering with strong incident leadership and the ability to turn ambiguous risks into practical, scalable operations.

This is a senior individual contributor role with high visibility and a clear path to shaping a dedicated team as the function matures.

What you will do

Build MOIA's Security Operations Center capability, including scope, operating model, responsibilities, escalation paths, and success metrics.
Own the SIEM strategy and implementation, including log source prioritization, data quality, detection logic, alert workflows and long-term maintainability.
Develop threat-informed detections across cloud, application, identity, endpoint, CI/CD and infrastructure environments.
Create and continuously improve incident response playbooks, triage processes, investigation workflows and post-incident learning.
Lead security investigations and coordinate response activities with engineering, platform, IT, legal, privacy and communication stakeholders when needed.
Define how MOIA measures detection and response maturity, including coverage, signal quality, false positives, MTTD and MTTR.
Evaluate and steer security tooling and external partners where they help us move faster or operate more reliably.
Translate Vehicle, AppSec and Cloud Security insights into concrete detection, logging and response use cases.
Mentor colleagues, establish best practices and help prepare the future team setup for Detection & Response at MOIA.

What will help you to fulfill your role

Several years of experience in security operations, detection engineering, incident response, cloud security or a similar security engineering role.
Hands-on experience building or significantly maturing SOC, SIEM or incident response capabilities.
Strong understanding of SIEM platforms and log pipelines, such as Splunk, Elastic, Microsoft Sentinel, Chronicle, Datadog or similar.
Experience writing detection rules, correlation logic and investigation queries using languages such as KQL, SPL, SQL, Sigma or equivalent.
Solid knowledge of cloud-native environments, ideally AWS, Kubernetes, serverless architectures, IAM and CI/CD security.
Ability to lead incidents calmly, communicate clearly under pressure and bring technical and non-technical stakeholders together.
A pragmatic engineering mindset: you automate where it helps, document where it matters and focus on reducing real risk.
Business-level fluency in English. German is a plus.

Nice to have

Experience with SOAR, detection-as-code, security data lakes or scalable log retention strategies.
Background in AppSec, product security, cloud forensics or vulnerability management.
Experience in regulated, mobility, automotive or safety-critical environments.
Previous involvement in hiring, mentoring, or building a security team.

We welcome applicants from diverse backgrounds — even if you don't meet every requirement. If you're excited about the role and MOIA's mission, we'd love to hear from you!

Our benefits in a nutshell

Competitive salary (including bonus)
Hybrid work setup: Work from home or one of our offices - you and your team decide how often to meet, blending flexibility with collaboration!
Flexible working hours and the possibility of flexible work arrangements depending on your needs (parenting, care work, volunteering, etc.)
Budget and monthly expense allowance for home office setup
Possibility of remote work from outside Germany for up to 6 weeks per year from over 35 countries - learn more in our blog!
Public transport ticket (fully subsidized "Deutschlandticket") for commuting and travelling throughout Germany and discount on MOIA rides
Subsidized fitness club membership or bike leasing
Learning environment with continuous learning days, job rotation, trainings and workshops, coaching, conferences, books, and language classes
Mental health support, 1:1 sessions with external professionals and mental unload workshops
30 vacation days, sabbatical and unpaid leave option
Relocation support with service provider (visa, administration, etc.)
Dog-friendly offices

For student & internship positions, we have an adjusted set of benefits. You can find them here.

Be who you are!

We are a member of Charta der Vielfalt and are dedicated to actively fostering a workplace that celebrates and promotes diversity in various aspects such as age, gender identity, race, sexual orientation, physical or cognitive ability, and ethnicity. At MOIA, we embrace a culture where people are accepted, respected, valued, appreciated, and included.

In our commitment to promoting diversity and inclusivity, we regularly provide unconscious bias training to all our employees. Furthermore, we continuously strive to enhance our hiring process by ensuring a diverse hiring panel.

How we work

At MOIA, our teams are typically distributed across our office locations and collaborate in a hybrid setup. We work together both remotely and on site, choosing the mode of collaboration that fits the context, the work at hand, and each team's rhythm.

Spending time together in our offices is an important part of how we stay connected, build trust, and solve complex problems. At the same time, we value flexibility and give teams and individuals autonomy to shape their ways of working, with everyone having the freedom to organise their routines in a way that aligns with their work and their team's needs.

If you'd like to learn more about how we work, visit our blog for insights into our culture and hiring process, or follow us on Instagram for a look behind the scenes at MOIA.

Who we are

At MOIA we're reimagining the future of mobility – safe, autonomous and tailored to the needs of cities and their people. As a tech company with more than 400 employees, we build mobility solutions that truly move cities forward.

We launched our ridepooling service in Hamburg in 2019 and have been part of the city's public transport system since 2023. Since launch, we have transported over 12 million passengers. Currently, MOIA is evolving from a mobility provider to a tech provider offering a scalable and safe turnkey solution for autonomous driving.

With office locations in Berlin and Hamburg, our diverse and international team comprising more than 60 nationalities works together toward that shared mission.

MOIA is more than a technology provider – we are a partner to cities and public transport operators committed to creating more livable spaces and delivering mobility solutions that are reliable, safe and comfortable.

Your application to MOIA

We value authenticity and personal insights in your application responses. While AI tools can be useful, we encourage you to answer the following questions based on your own experiences and understanding. This helps us keep a human touch and better evaluate your unique perspective and match for the role.

To reinforce an unbiased screening process, we kindly ask you not to include your picture, age, address, or any other details unrelated to your qualifications and suitability for the role. Additionally, we anonymize applications during the initial review phase by removing personally identifiable information. This ensures that our evaluation focuses solely on your skills, experience, and potential – supporting a fair and inclusive hiring experience for all candidates.

MOIA

Open Positions