SOC Analyst – Expert Security Operations (w/m/d) (BesGr A 12 HBesG / Entgeltgruppe 12 TV...
Core
Analyze and triage security events, investigate complex attack scenarios, and coordinate incident response within a Security Operations Center for a critical national infrastructure.
Role type
Senior SOC Analyst (Security Operations)
Builds
Security monitoring, incident response, and threat detection capabilities for the German Pension Insurance system.
Domain
Cybersecurity / Critical Infrastructure
Required skills
Security event analysis, incident triage, attack scenario reconstruction, log correlation, threat intelligence integration, incident response coordination, detection rule optimization, false positive identification, technical documentation, threat hunting support
Preferred skills
Advanced knowledge of detection gaps, Kill-Chain use case development, complex technical relationship mapping
Technologies
Security Operations Center tools, SIEM, Log management systems, Threat Intelligence platforms, Incident Response frameworks
Responsibilities
Analyze and evaluate security events and alerts, prioritize potential security incidents, reconstruct attack paths and timelines, correlate events from security and log data, support incident response and containment, document analyses and decisions, identify false positives, evaluate existing detection rules, identify detection gaps, derive requirements for additional security data, participate in developing and optimizing detection use cases
Seniority
Senior, hands-on IC
