GISA GmbH: Analyst Cybersecurity (m/w/d)*
Core
Analyze escalated security alerts from SIEM, EDR, and network sensors to investigate incidents, reconstruct timelines, and implement containment measures for customer IT landscapes.
Role type
2nd Level SOC Analyst
Builds
Incident response workflows and detection rules for client environments
Domain
Cybersecurity / SOC Operations
Required skills
Incident analysis, timeline reconstruction, attack path mapping, containment strategies, SIEM/EDR operations, threat intelligence application, scripting (KQL/PowerShell/Python), Windows/Linux/Active Directory, network protocols
Preferred skills
MITRE ATT&CK framework knowledge, CTF experience, Security certifications (CySA+, BTL1, Security+)
Responsibilities
Analyze and close escalated security alarms, investigate security incidents and assess impact, initiate containment measures with customers, develop detection rules and playbooks, support 1st level team, share knowledge within the team
Seniority
Junior to Mid-level, hands-on IC
