Senior SOC Analyst (f/m/d)

Customer-facing role | significant responsibility for implementation, customer communication and service improvement We are looking for a Senior SOC Analyst (Security & Development) with a strong background in Use-Case Development and Alert Tuning. You will lead customer workshops and technical meetings in German, analyze their existing environments, and translate business and security requirements into Use-Cases and Detection Rules. In addition to that you will be included in the SOC-Team to have direct impact on operational Analysis work. You analyze alerts from heterogeneous ICT infrastructure solutions at our customers , derive necessary measures from them, and provide consulting support during implementation. In the case of IT security incidents, you collect, analyze, and document digital evidence and ensure that these incidents are followed up in accordance with internal guidelines and customer requirements. By actively optimizing processes and developing automation concepts , you contribute to the continuous improvement of the services provided by our Cyber Defense Center. As a technical expert for our SOC solutions, you support our Security Delivery Managers in customer meetings and proactively provide recommendations to improve the customer’s security infrastructure. You keep yourself up to date on the latest security solutions available on the market. Your Profile Several years of practical experience in a Security Operation Center, Computer Emergency Response Team, or Computer Incident Response Team Knowledge in ICT domains such as networks, security applications and solutions (e.g., firewalls, IDS/IPS), operating systems (Windows, Linux, Unix), and security solutions for IT endpoints; in particular, experience with technologies like Splunk and within the Microsoft Sentinel/Defender environmen t Experience in the development and further development of detection rules and use cases, and in writing KQL/SPL queries German skills (C1/C2) to be able to lead workshops, present architectures, and write documentation for German-speaking customers English skills (B2+) to collaborate with international teams, read and create technical documentation, and participate in global projects Process-oriented working as well as adherence to clear reporting structures and communication channels Mandatory Certifications: GCFA (or similar), Microsoft SC-200, Splunk CCDA (or similar) Advantagous: Threat hunting experience, experience in vulnerability assessment and additional Blue-Team certifications Benefits & More Flexible working: Home office, remote work, flextime, sabbatical 26 vacation days & days off on December 24th and 31st Paid lunch break, canteen & vouchers Free A1 internet plus additional discounts for family & friends Company phone for personal use as well Internal job market at A1 & skill enhancement A1 Radl – Lease a bicycle or e-bike at affordable rates For this position, we offer an annual gross salary starting at EUR 80.000 (all-in, 40 hours/week).