SOC Team Lead

About us

Our lab is a back room full of test hardware, old routers and a rack of virtual machines. Every report is written by the person who did the testing, not a separate writing team.

The role

We're looking for an SOC Team Lead to join our team. This is a remote role. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Remote within Germany. The team meets in Cologne once a quarter, travel covered. You need a reliable internet connection and somewhere quiet to work.

In your first few months you will

• Report on security awareness training and phishing simulation results
• Hand off open cases at shift change with clear notes
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Escalate confirmed incidents and follow the incident response plan
• Tune noisy detection rules with the security engineering team

About you

• 7+ years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Must be able to pass a background check
• Clear written communication for incident tickets and reports

Pluses

• KQL or SPL query writing
• Malware analysis in a sandbox
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines

Benefits

Salary: €75,000 - €90,000 a year

• Company pension scheme
• Holiday pay
• Meal allowance
• Christmas bonus

Please mention your notice period and expected salary.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Wrenfield Defense GmbH.