Назад
Company hidden
3 дня назад

Security Analyst - Incident Response (AI)

62 000 - 75 000€
Формат работы
hybrid
Тип работы
fulltime
Грейд
middle
Английский
c1
Страна
Germany
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Analyst - Incident Response (AI) (Incident Response/DFIR): Maintaining incident readiness, investigating security incidents, and improving detection across internal systems and cloud environments with an accent on SIEM operations, digital forensics, Python automation, and AI-assisted security analysis. Focus on building incident response playbooks, investigating high-fidelity alerts, tracking zero-day threats, and implementing proactive security controls.

Location: Hamburg, Germany; hybrid workplace

Salary: EUR 62,000–75,000 yearly

Company

hirify.global is a Europe-based e-commerce company operating at the intersection of fashion and technology, with a culture of flat hierarchies, direct communication, ownership, inclusion, and pragmatic decision-making.

What you will do

  • Deploy, configure, and maintain DFIR tools and infrastructure to preserve incident readiness.
  • Act as the first responder for security incidents, lead digital forensics investigations, and drive post-incident risk mitigation.
  • Maintain and optimize SIEM platforms and investigate, analyze, and remediate security alerts across internal systems and cloud environments.
  • Enhance monitoring and scanning systems with Python automation and identify vulnerabilities.
  • Integrate AI technologies into security operations for detection, triage, and threat hunting.
  • Create incident response playbooks and track emerging cyber threats and zero-day vulnerabilities to implement proactive controls.

Requirements

  • 2–4 years of hands-on experience in IT security, incident response, security operations, or digital forensics.
  • Hands-on experience with incident response, blue teaming, or digital forensics, including exposure to cloud environments such as AWS, Azure, or GCP.
  • Practical experience using and configuring SIEM tools, including investigating alerts and querying logs.
  • Ability to write Python or similar scripting-language scripts to automate daily tasks.
  • Familiarity with modern AI-assisted tools for analysis or automation, including agentic work rather than chatbot use.
  • Solid Linux operating system fundamentals and command-line usage.
  • Basic experience managing or configuring web application firewalls, preferably Cloudflare.
  • Strong cross-functional technical communication skills and the ability to explain technical findings to technical and non-technical stakeholders.
  • Fluent spoken and written English.

Nice to have

  • SANS or GIAC training, OffSec OSIR, or incident response challenges on HackTheBox or TryHackMe.
  • Knowledge of Laravel or PHP.
  • Experience with AWS or GCP.
  • Experience with GitLab CI/CD pipelines.
  • Experience with Terraform or Terragrunt.
  • Experience with digital forensics.

Culture & Benefits

  • Flat hierarchies, direct communication, pragmatic decisions, ownership, and clear responsibility.
  • Inclusive environment focused on acceptance, diverse perspectives, and fairness.
  • Team lunches, afterwork drinks, company events, and informal opportunities to connect.
  • Additional employee perks are available through the company benefits program.

Hiring process

  • Apply online through the company career page.
  • The hiring team will follow up after the application.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →