Junior Security Analyst

Who we are

The product is a vulnerability management platform that scans networks and ranks fixes by real-world risk. Government contractors use our services to prepare for CMMC assessments and NIST 800-171 compliance.

What this job is

We need a Junior Security Analyst. This is a contract position based in Nuremberg, Bavaria. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. This position is on site in Nuremberg.

What you'll do

• Hand off open cases at shift change with clear notes.
• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Tune noisy detection rules with the security engineering team.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.

You might be a good fit if you

• 1+ years in an SOC, security analyst or IT security role.
• Working knowledge of SIEM and EDR tools.
• Clear written communication for incident tickets and reports.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.
• Familiarity with the MITRE ATT&CK framework.

Nice to have

• Cloud log analysis (CloudTrail, Entra ID sign-in logs)

Perks and benefits

Rate: €43,000 - €52,000 a year

• Flexible working hours.

Duration: 6 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Winchwater Labs e.K..