Senior SOC Analyst (f/m/d)

a1 - Industrieböden AG seeks a Senior SOC Analyst to lead customer workshops, analyze security alerts, and develop detection rules. The role requires strong expertise in Splunk, Microsoft Sentinel, and incident response.

This position focuses on enhancing the Cyber Defense Center's services by directly impacting operational analysis. The analyst leads technical discussions with clients to convert security needs into actionable detection logic and ensures continuous improvement of defense capabilities.

Responsibilities

• Facilitate customer workshops and technical sessions in German to align business goals with security strategies.
• Translate specific business and security requirements into functional Use-Cases and Detection Rules.
• Investigate alerts generated by diverse ICT infrastructure at client sites.
• Determine necessary remediation steps from alerts and assist clients during implementation.
• Gather, examine, and record digital evidence during IT security incidents.
• Track incident resolution to ensure compliance with internal protocols and client expectations.
• Refine existing processes and create automation strategies.
• Advise Security Delivery Managers during client engagements to strengthen security infrastructure.
• Stay informed about emerging security technologies and market solutions.

Requirements

• Proven experience working in a Security Operation Center, Computer Emergency Response Team, or Computer Incident Response Team.
• Solid understanding of ICT domains including networks, operating systems (Windows, Linux, Unix), and security tools like firewalls and IDS/IPS.
• Hands-on experience with Splunk and the Microsoft Sentinel/Defender ecosystem.
• Background in creating and refining detection rules and use cases.
• Proficiency in writing KQL and SPL queries.
• Ability to work in a process-oriented manner while adhering to reporting structures.
• Possession of GCFA (or equivalent), Microsoft SC-200, and Splunk CCDA (or equivalent) certifications.
• Fluent proficiency in German.

What the company offers

• Flexible work arrangements including home office, remote work, flextime, and sabbatical options.
• 26 vacation days plus additional time off on December 24th and 31st.
• Paid lunch breaks, canteen access, and meal vouchers.
• Free A1 internet service and discounts for family and friends.
• Company phone for personal use.
• Access to internal job markets and skill enhancement opportunities.
• A1 Radl program for affordable bicycle or e-bike leasing.