DCSO Mitarbeiter sitzt vor zwei Bildschirmen

Defend (Services)

Senior SOC Analyst (f/m/d)

We are committed to equal opportunities and diversity. We therefore welcome all applications - regardless of nationality, religion/worldview, ethnicity and social origin, age, and sexual orientation and identity.





Full time

Working time



The Job

Does that get you up in the morning?

  • Analysis and assessment of network- and endpoint-based alerts in our customers’ infrastructures
  • Derivation of sensible characteristics for automation of alert grouping
  • Continuous improvement of implemented automations and classification mechanisms
  • Preparation of comprehensive situational analysis reports for our customers, alongside with suitable recommendation for their response personnel
  • Tight interaction with the DCSO TI and IR team on specific cases
  • Responsibility for select customers as their focal contact point
  • Coverage not only of solely technical, but also service relevant / business aspects
  • Contribution to overall service development / improvement


What we’re looking for*

  • Several years of professional experience in the field of cyber security and practical experience in the field of security incident management
  • Sound understanding of state-of-the-art EDR/XDR solutions
  • Solid understanding of IP networking, network analysis and IDS/IPS approaches
  • Practical experience in presenting incident related information to a diverse audience
  • Very good understanding of nowadays cyber threats and typical techniques used by adversaries
  • Sound knowledge of the MITRE ATT&CK framework and experience with its application to routine SOC tasks
  • Fluent in English, both, verbally and in writing
  • Experience with / good knowledge of Splunk would be a plus
  • Experience with / knowledge of the OSS IDS Suricata and respective rule writing would be a plus

*Courage to leave a gap: You don’t meet our requirements completely? We are still looking forward to your application!

We would like to increase the number of women in areas where they are underrepresented and are therefore particularly happy to receive applications from women. BIPOCs and people from the LGBTQIA+ community as well as people with a migration background are also strongly encouraged to apply. Applications from severely disabled people will be given preferential consideration in the context of equal suitability.


Best Place to Work

  • Culture

    International team
    Company events
    Close team atmosphere
    Culture of trust
    Openness and transparency

  • Modern Work Environment

    Trust-based flex time
    Remote work
    Part-time schedules
    Ergonomic office equipment

  • Feel good

    Fruit and vegetables
    Diverse selection of drinks
    Daily food allowance
    Health care
    Subsidy Urban Sports Club
    Language courses with Babbel
    voiio - Employee Wellbeing Plattform

  • Financials

    Market-competitive salary
    30 days of vacation
    Closed on 24th and 31st December
    Employer-funded pension
    Continuing education and conferences
    Holiday-subsidy voluntary service
    Subsidy BusinessBike
    Subsidy "Deutschlandticket Job"
    Shopping discount via Corporate Benefits