Senior Security Incident Response Analyst

• Our SOC team is expanding! We are looking for a Senior Security Analyst to lead our advanced investigation and threat intelligence workflows
• This role is designed for a technical expert who thrives on complex incident response and proactive threat hunting
• Incident Response: Drive the end-to-end lifecycle of security incidents, from initial detection through to advanced containment and recovery
• Threat Intelligence: Drive the threat intelligence process by analyzing emerging trends and integrating external feeds into our detection logic
• Forensic Analysis: Perform deep-dive host and network forensics to identify root causes and persistence mechanisms
• Automation & Playbooks: Design and refine automated SOAR playbooks to increase the speed and consistency of our response
• Proactive Hunting: Execute hypothesis-driven threat hunts across our environments
• Technical Leadership: Act as an escalation point for complex alerts and mentor junior analysts on advanced investigative techniques
• Stakeholder Communication: Generate detailed incident reports and present findings to both technical teams and executive stakeholders, ensuring clarity on impact and resolution

Benefits

• Remote working opportunities - collaborate with your team no matter where you are in Germany: the majority of our jobs can be done working from home. So if you aren’t near one of our physical locations in Germany, check out if your job is eligible remotely
• Join an international and diverse, inclusive community - be part of a network of highly talented, diverse and motivated people, from more than 30 nationalities. We enjoy regular office parties & after work drinks, BBQs in the summer, weekly runs and much more
• Lounge around - take a break to relax on our terrace in Munich or in the Beergarden downstairs in Berlin. Enjoy fresh fruits, soft drinks, and tea daily, and if want, develop your Barista skills with our Espresso machine
• Gear and perks - work with the latest hardware (including a MacBook Pro or equivalent and your choice of headphones). We also support your workplace with the equipment that you need, either in the offices or at home
• Learn and grow - develop yourself further with a personal education budget and in-house knowledge sharing sessions with catered lunch. If you want to learn or improve your German language skills, you will like the free classes right in the office or our support for online classes
• Have an impact - ship features to thousands of users and work with leading financial institutions across Europe on a regular basis. Transform with us the traditional finance industry with the aim of democratizing investment management and brokerage- Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets
• Relevant certifications such as GCIH, GCFA, CISSP, or equivalent are a plus
• Extensive hands-on SOC or incident response experience, including Tier 2 / Tier 3 responsibilities
• Strong understanding of network protocols, endpoint security, and common attack vectors
• Hands-on experience with AWS security controls and container security
• Strong communication skills, capable of translating technical findings to non-technical audiences
• Ability to use Python or similar scripting languages for security automation and data analysis
• Excellent analytical mindset, attention to detail, and ability to thrive under pressure