Job
In this role, you analyze security alerts, conduct incident response measures, and proactively hunt threats while closely collaborating with detection engineering to enhance security rule sets.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- Incident Detection & Analysis: Analysis and assessment of security alerts and incidents within the SOC, as well as prioritization and initiation of appropriate measures for quick and effective response.
- Incident Response: Execution and coordination of incident response measures including containment, eradication, and recovery, as well as documentation and post-incident review of security incidents.
- Threat Hunting: Proactive identification of threats through hypothesis-driven Threat Hunting based on current TTPs, Threat Intelligence, and MITRE ATT&CK.
- Use Case Feedback & Detection Improvement: Close collaboration with Detection Engineering to improve existing Detection Rules and develop new Use Cases based on Incident Learnings.
- SIEM & Tooling Usage: Active work with SIEM and security tools (e.g., Elastic Security) for analysis, correlation, and visualization of security-related events.
- Customer Communication & Reporting: Communication of incidents, risks, and measures to internal stakeholders and customers, as well as the preparation of reports and recommendations.
- Quality & Development: Continuous improvement of analysis processes, playbooks, and SOC workflows, as well as mentoring less experienced analysts.
Our expectations of you
Education
- Completed technical education (HTL, FH, university) or equivalent qualification, as well as several years of experience in Security Operations, SOC, or Incident Response.
Qualifications
- Basic knowledge of scripting or automation (e.g., Python, APIs) is advantageous.
- Analytical, structured, and solution-oriented working style as well as strong communication skills in German and English.
Experience
- Extensive hands-on experience in the analysis and handling of security incidents within a SOC environment.
- Very good understanding of attack vectors, TTPs, and common threat scenarios, as well as experience with frameworks such as MITRE ATT&CK.
- Experience with SIEM and security tools (e.g., Elastic Security) as well as proficient handling of log analysis from Windows, Linux, and network sources.
- Experience in Threat Hunting as well as in developing hypotheses for identifying complex attacks.
- Experience in structured incident documentation as well as in reporting to clients or management.
What we offer
- Your gross salary according to the collective agreement ranges between EUR 4,000 and EUR 5,200.
- A salary adjustment is planned depending on qualifications and professional experience.
Benefits
Higher take-home pay
Food & drink
Health, fitness & fun
Work-Life-Integration
Topics you will work on
Job locations
About your employer
Klagenfurt Am Wörthersee, Graz, Salzburg, St. Peter In Der Au, Wels, Wien
Our company provides expert consultation, software development, and operational management for information systems in the health care and social services industries—from large hospitals to smaller organizations.
- Established Company
- Onsite, Hybrid
- Healthcare, Social Sector · Internet, IT, Telecommunication
Employer reviews
- Career growth
- 4.2
- Working conditions
- 4.0
- Team culture
- 3.9
- Engineering
- 3.6
More jobs
These jobs might also interest you
Do you enjoy diving deep into code and want to build a product that truly makes an impact? With us, you work hands-on on an AI platform that combines SaaS and on-premises, exclusively relies on open source, and successfully implements AI on-prem and...
We are one of the leading European manufacturers of innovative biomass heating systems (firewood, wood chips, pellets). Due to the strong demand for our products and the excellent future prospects for "renewable energy," we are expanding our team. ...
End-to-End Development:You accompany exciting software projects from the initial requirements analysis through implementation (e.g., with Spring Boot) to successful deployment. Microservices & Architecture:You design and develop robust, highly scalable...