SOC Automation Analyst - SOAR & Incident

Location: Bratislava, Austria; part-time position.

Salary: minimum EUR 2,700 gross per month for a full-time position; actual compensation depends on professional and personal qualifications.

Company

hirify.global is the IT organization of Erste Group, a major banking group in Central and Eastern Europe with more than 2,500 branches, over 45,000 employees, and more than 2,000 IT experts.

What you will do

• Identify security investigation and response activities suitable for automation.
• Design, build, and maintain SOAR playbooks for enrichment, triage, notification, containment, and remediation.
• Integrate security and IT platforms through APIs, webhooks, and connectors.
• Develop automation using Python, PowerShell, or comparable technologies.
• Build reliable workflows with approval points, error handling, logging, permissions, and monitoring.
• Analyze incidents, improve playbooks and response procedures, and collaborate with SOC analysts, security engineers, threat intelligence specialists, and service owners across the international organization.

Requirements

• Hands-on experience investigating security alerts or incidents in SOC, incident response, or security engineering environments.
• Experience automating security or operational processes using Python or comparable scripting technologies.
• Good understanding of APIs, integrations, and security technologies such as SIEM, EDR, identity, or cloud security.
• Sound judgment about what to automate, where human approval is needed, and how to manage automation risk.
• A structured approach to building, testing, and maintaining reliable production automation.
• Understanding of attacker behavior and frameworks such as MITRE ATT&CK.
• Professional fluency in English.

Nice to have

• Experience with SOAR platforms, detection engineering, threat hunting, cloud or DevOps technologies, or related security disciplines.
• Relevant security certifications.
• German language skills.

Culture & Benefits

• Ownership of production security operations across a major European banking group.
• Collaboration with security specialists across countries and opportunities to grow across security operations, engineering, and automation.
• Medical examination contribution, a support helpline, and salary compensation during sick leave.
• Sabbatical, paternity leave, marriage and childbirth contributions, four additional vacation days per year, third-pillar contribution, and a MultiSport card.
• Employee referral rewards and an equal-opportunity workplace focused on diversity.