As a Security Operations Center (SOC) Analyst, you will play a key role in protecting customer environments against cyber threats. You will monitor security events, investigate incidents, coordinate response activities and support customers in maintaining a strong security posture.
The role combines hands-on cybersecurity operations with incident investigation and customer-focused security support, providing exposure to diverse technologies, threat landscapes and international security environments.
Responsibilities
Security Monitoring & DetectionMonitor customer environments for security threats, suspicious activities and policy violations, ensuring timely identification of potential risks.
Alert Analysis & TriageAnalyze and prioritize security alerts generated by SIEM, EDR/XDR, network, cloud and other security technologies, determining appropriate response actions.
Incident InvestigationInvestigate security incidents, assess their severity, impact and business relevance, and distinguish between true positive and false positive events.
Incident Escalation & Response SupportEscalate validated incidents to customer security teams in accordance with established procedures and SLAs, while supporting incident response activities when required.
Customer CommunicationCommunicate incident details, recommendations and investigation findings to customers in a clear, professional and customer-oriented manner.
Threat Analysis & CorrelationCorrelate information from multiple data sources to identify malicious activity, emerging threats and attack patterns across complex environments.
Documentation & Continuous ImprovementDocument investigations, findings and response actions within ticketing and case management systems, while contributing to threat hunting, detection improvements and SOC process optimization.
Collaboration & Security EnhancementWork closely with international colleagues, customers and technology partners to strengthen overall security capabilities and improve customer security posture.
Your Profile
Experience in a Security Operations Center (SOC), Managed Security Services, Incident Response or a similar cybersecurity roleGood understanding of cybersecurity threats, attack techniques and incident handling processesHands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar or similar technologiesFamiliarity with EDR/XDR solutions, Microsoft Defender, network security monitoring and cloud security servicesStrong analytical and investigative skills, with the ability to assess and prioritize security events effectivelyExperience working in a customer-facing environment and communicating technical findings to various audiencesAbility to work under pressure, manage multiple incidents and maintain attention to detailGerman language proficiency at C1 level or native speaker (mandatory)Strong English communication skills
The minimum annual gross salary under the collective agreement of Telekom Austria AG for this position is EUR 51.042,74 (40-hour full-time work week). Depending on qualifications and professional experience, there is a willingness to offer a higher salary.