Назад
Company hidden
3 дня назад

Senior Security Incident Response Analyst

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Germany
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Incident Response Analyst (Cybersecurity): Leading advanced security investigations, threat intelligence workflows, and end-to-end incident response for a digital investment and banking platform with an accent on forensic analysis, cloud security, and automated SOAR playbooks. Focus on executing proactive threat hunts, identifying root causes and persistence mechanisms, and communicating complex findings to technical and executive stakeholders.

Location: Hybrid in München, Germany; international relocation support is provided if required; opportunity to work from abroad.

Company

hirify.global is a digital investment and banking platform with a full banking licence, offering brokerage, wealth management, banking, lending, private equity, and exchange services across Europe.

What you will do

  • Lead the end-to-end lifecycle of security incidents from detection through containment and recovery.
  • Drive threat intelligence workflows by analyzing emerging trends and integrating external feeds into detection logic.
  • Perform host and network forensics to identify root causes and persistence mechanisms.
  • Design and refine automated SOAR playbooks and execute hypothesis-driven threat hunts.
  • Act as an escalation point for complex alerts and mentor junior analysts on advanced investigative techniques.
  • Prepare detailed incident reports and present impact and resolution findings to technical teams and executive stakeholders.

Requirements

  • Extensive hands-on SOC or incident response experience, including Tier 2 / Tier 3 responsibilities.
  • Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets.
  • Hands-on experience with AWS security controls and container security.
  • Strong understanding of network protocols, endpoint security, and common attack vectors.
  • Ability to use Python or similar scripting languages for security automation and data analysis.
  • Excellent analytical mindset, attention to detail, ability to thrive under pressure, and strong communication skills for translating technical findings to non-technical audiences.

Nice to have

  • Relevant certifications such as GCIH, GCFA, CISSP, or equivalent.

Culture & Benefits

  • International, diverse, inclusive, and growing team in a fintech startup.
  • Latest hardware and tools.
  • In-house knowledge sharing, career development sessions, and an individual education budget.
  • Free German language classes.
  • Attractive compensation package, company pension scheme, and 50% monthly contribution toward the Deutschland Jobticket.
  • Complimentary PRIME+ Broker subscription and discounted sports activities through Urban Sports Club.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →