Senior Security Analyst (SOC L2/L3) – REF5729J

Stack

Responsibilities

• ▹Analyze and assess security alerts generated by SIEM, EDR/XDR, IDS/IPS, firewall and cloud security solutions
• ▹Investigate suspicious activities by reviewing security logs and identifying affected users, systems and potential attack paths
• ▹Perform hypothesis-driven threat hunting activities to detect malicious behaviour before it escalates
• ▹Map attacker behaviour to the MITRE ATT&CK framework and leverage threat intelligence to assess emerging cyber threats
• ▹Support incident response, containment and remediation activities
• ▹Document incidents, findings, timelines and recommendations in a structured and understandable way
• ▹Contribute to the continuous improvement of SOC processes, playbooks and operational procedures
• ▹Collaborate with internal stakeholders during security investigations and incident handling

Requirements

• ▹Professional experience in a Security Operations Center (SOC) or a similar cyber security environment
• ▹Hands-on experience with SIEM, EDR/XDR and IDS/IPS technologies
• ▹Good understanding of TCP/IP networking, DNS, HTTP/S and firewall concepts
• ▹Experience analyzing Windows and Linux security logs
• ▹Knowledge of MITRE ATT&CK and common attacker techniques
• ▹Ability to investigate alerts, validate incidents and document findings
• ▹Strong analytical thinking and problem-solving skills
• ▹Structured, reliable and self-driven working style
• ▹Fluent English communication skills
• ▹Basic German language skills

Nice to have

• ▹Experience with Elastic
• ▹Experience with Threat Hunting methodologies
• ▹Knowledge of Detection Engineering and rule tuning
• ▹Sigma or YARA
• ▹Malware analysis or Digital Forensics
• ▹Python, PowerShell or Bash scripting
• ▹Experience mentoring junior analysts
• ▹Stakeholder management experience
• ▹Continuous improvement mindset

Soft skills

About the company

Deutsche Telekom IT Solutions is a subsidiary of the Deutsche Telekom Group; its Security Operations Center Technology (SOC-T) team protects one of Europe's largest telecommunications environments.