Security Operations Centre Analyst (m/f/d)

• flexible working hours within a 37-hour week
• attractive opportunities for remote working
• thorough induction with dedicated points of contact
• 30 days’ holiday per calendar year
• a wide range of workplace health promotion schemes
• a subsidy towards the Deutschlandticket for all employees

What you can always count on at persona service:

• thorough preparation for your interview with our client
• a monthly allowance of €50 towards your travel costs, depending on the role – e.g. for the Deutschlandticket and much more
• Bonuses, as well as holiday and Christmas pay, and attractive industry-specific allowances
• Free tuition for your children on the Ubimaster learning and tutoring platform
• Numerous shopping discounts with well-known brands via our corporate benefits programme
• Excellent personal support and regular feedback meetings
• A wide range of further training opportunities

• You will monitor and analyse security-related events and alerts during live operations
• You will assess, prioritise and handle security incidents independently
• You will carry out initial analyses and implement appropriate measures in accordance with defined playbooks
• You will identify anomalies and attack patterns at an early stage and document them in a traceable manner
• You will support the team with your expertise during incident response and forensic investigations
• You will maintain the SOC documentation and ensure smooth operational processes
• You will work closely and in coordination with IT operations and other security functions
• You will analyse security-related logs and events from various systems and networks
• You classify suspicious cases according to risk and escalate them to the relevant departments

• You have completed a vocational qualification as a computer scientist (m/f/d), IT specialist (m/f/d) or hold a comparable qualification
• You have at least three years’ professional experience in an operational IT security environment, particularly in security monitoring, SIEM and alert analysis
• You are well versed in networks, Windows and Linux systems, as well as common attack methods
• Certifications such as CompTIA Security+, CySA+ or Microsoft SC-200 are an advantage
• You have a good command of written and spoken German
• You hold a clean criminal record
• Reliability, the ability to work as part of a team and a meticulous approach to your work round off your profile