SOC Analyst (Security Operations Center)

About the role

The Security Operations Center (SOC) Analyst will continuously monitor and analyse the organisation's security posture, identifying and mitigating risks to protect data, infrastructure and systems. This position works within a 24/7 shift model, rotating 12‑hour day and night shifts.

Key responsibilities

• Monitor security events and alerts in real time to detect malicious activity and anomalies.
• Conduct initial investigations of security incidents following documented procedures and playbooks.
• Classify and prioritise alarms based on severity and context, documenting actions in the case management system.
• Escalate incidents to Tier 2 analysts and support them by gathering logs and early observations.
• Perform basic forensic triage, threat‑intelligence reviews and propose workflow improvements.

Required profile

• Bachelor’s degree in Computer Science, IT, Cybersecurity or equivalent experience.
• Strong analytical mindset, attention to detail and willingness to learn within a SOC environment.
• Effective written and verbal communication skills; German language ability is a plus.

Required skills

• Experience with SIEM platforms such as Splunk and Microsoft Sentinel.
• Familiarity with Microsoft Defender for Endpoint, IDS/IPS, endpoint protection and the MITRE ATT&CK framework.
• Basic understanding of incident response, threat detection and alert lifecycle management.
• Relevant certifications (e.g., CompTIA Security+, SC‑200, SC‑900, Splunk Core Certified User) are advantageous.