Lead Security Analyst

Position summary:

We are adding a Lead Security Analyst to our SOC team. The SOC team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. Fully remote. You can work from anywhere in Germany.

What you'll be doing:

• Hand off open cases at shift change with clear notes
• Write and update SOC runbooks and playbooks
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Report on security awareness training and phishing simulation results
• Check threat intelligence feeds and IOCs against our environment
• Escalate confirmed incidents and follow the incident response plan
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
• Help with user access reviews and offboarding audits

Required qualifications:

• 7+ years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Working knowledge of SIEM and EDR tools
• Must be able to pass a background check

What we offer:

• Company pension scheme
• Holiday pay
• Flexible working hours
• Home office equipment

Company overview:

Our website and apps help renters search listings, schedule tours and submit applications. Most of our traffic is mobile, so the iOS and Android apps get as much attention as the website. Founded in 2019, we now have 130 employees.

Candidates must be eligible to work in Germany.

Please mention your notice period and expected salary.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Isar Web GmbH.