SOC Analyst (w/m/d)
Core
Monitor security alerts in Splunk ES and Trend Vision One, investigate incidents, and coordinate threat mitigation with clients.
Role type
SOC Analyst (Level 1/2)
Builds
Incident response workflows and detection capabilities for client environments
Domain
IT Security / Managed Services
Required skills
Splunk (SPL, ES, Data Models), EDR platforms (Trend Vision One), Python, Bash, PowerShell, MITRE ATT&CK, Windows/Linux administration, Active Directory, Entra ID
Preferred skills
SOAR automation, Playbook development, SOC Analyst certification
Technologies
Splunk, Trend Vision One, Python, Bash, PowerShell, Active Directory, Entra ID
Responsibilities
Monitor and evaluate security alerts in Splunk ES and Trend Vision One; investigate security incidents to identify root causes and affected systems; implement immediate containment measures and coordinate with clients; document incidents and create reports; develop and maintain SOPs, runbooks, and escalation processes; contribute to SIEM solution improvements and detection use cases; provide on-call support outside core hours.
Seniority
Mid-level, hands-on IC