SOC Analyst (m/f/d)

You blossom in your mission, for:

At the SOC Managed, you keep security alerts in Splunk ES and Trend Vision One in mind, evaluate them and support customers in 1st and 2nd level support with security-relevant enquiries and incidents. Security incidents are examined by you, analysed with regard to causes, impacts and attacks as well as identified systems and accounts. To mitigate and eliminate threats, you will introduce appropriate emergency measures and coordinate the necessary steps together with the customers. The comprehensible documentation of security incidents, the creation of reports and the derivation of optimization measures are also part of your task. With the creation and maintenance of SOPs, Runbooks and Escalation processes, you contribute to an efficient Incident Response. You are actively contributing your experiences to the further development of SIEM solutions, dashboards and detection-use cases. With your feedback you support the continuous improvement of the recognition quality in the SOC; if required, you will also be able to call outside the core working hours.

You have successfully completed a study or training in the IT field or have a comparable qualification; certification as SOC Analyst (level 1 or 2) is advantageous. Finding knowledge of Splunk, in particular in SPL, Splunk ES, Notable Events and Data Models, will distinguish you; ideally, you will also experience SOAR automation and playbook development. Practical experience in handling EDR platforms, ideally Trend Vision One, complete your security know-how. For the automation and integration of security processes, you can safely use Python, Bash and/or PowerShell. Modern attack techniques, common procedures of attackers and frameworks such as MITRE ATT&CK are very familiar to you. Security incidents analyze structured, analytical and solution-oriented and convince with clear communication even in time-critical situations. Good knowledge in the administration of Windows and Linux systems as well as Active Directory and Entra ID, very good German knowledge (at least C1) and the readiness to verify security (SÜ2) complete your profile.

Further development: With an extensive range of Bechtle Academy, individual career planning, expert: in-house and management programs, manufacturer certifications and much more, you are constantly developing and never standing. All-round careless package: Your future is important to us. This shows our attractive occupational disability insurance and occupational retirement with a grant of up to 100 percent. 30 days holiday: 6 weeks free time you can use to relax, relax, travel and feet. Modern Workplace: At the workplace of the future you receive the latest technology equipment and work in an innovative working environment. Onboarding: Our comprehensive introduction event MIKADO, a training plan individually tailored to your role, and a personal contact person ensure your perfect start with us. .