Senior Security Incident Response Analyst (m/f/x)

Our SOC team is expanding! We are looking for a Senior Security Analyst to lead our advanced investigation and threat intelligence workflows. This role is designed for a technical expert who thrives on complex incident response and proactive threat hunting.

Key responsibilities:

• Incident Response: Drive the end-to-end lifecycle of security incidents, from initial detection through to advanced containment and recovery.
• Threat Intelligence: Drive the threat intelligence process by analyzing emerging trends and integrating external feeds into our detection logic.
• Forensic Analysis: Perform deep-dive host and network forensics to identify root causes and persistence mechanisms.
• Automation & Playbooks: Design and refine automated SOAR playbooks to increase the speed and consistency of our response.
• Proactive Hunting: Execute hypothesis-driven threat hunts across our environments.
• Technical Leadership: Act as an escalation point for complex alerts and mentor junior analysts on advanced investigative techniques.
• Stakeholder Communication: Generate detailed incident reports and present findings to both technical teams and executive stakeholders, ensuring clarity on impact and resolution.

• Extensive hands-on SOC or incident response experience, including Tier 2 / Tier 3 responsibilities
• Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets
• Hands-on experience with AWS security controls and container security 
• Strong understanding of network protocols, endpoint security, and common attack vectors
• Ability to use Python or similar scripting languages for security automation and data analysis.
• Relevant certifications such as GCIH, GCFA, CISSP, or equivalent are a plus
• Excellent analytical mindset, attention to detail, and ability to thrive under pressure
• Strong communication skills, capable of translating technical findings to non-technical audiences