SOC Analyst with German (f/m/d) @ A1 Competence Delivery Center

As a Security Operations Center (SOC) Analyst, you will play a key role in protecting customer environments against cyber threats. You will monitor security events, investigate incidents, coordinate response activities and support customers in maintaining a strong security posture.

The role combines hands-on cybersecurity operations with incident investigation and customer-focused security support, providing exposure to diverse technologies, threat landscapes and international security environments.

Responsibilities

• Security Monitoring & Detection
• Monitor customer environments for security threats, suspicious activities and policy violations, ensuring timely identification of potential risks.

• Alert Analysis & Triage
• Analyze and prioritize security alerts generated by SIEM, EDR/XDR, network, cloud and other security technologies, determining appropriate response actions.

• Incident Investigation
• Investigate security incidents, assess their severity, impact and business relevance, and distinguish between true positive and false positive events.

• Incident Escalation & Response Support
• Escalate validated incidents to customer security teams in accordance with established procedures and SLAs, while supporting incident response activities when required.

• Customer Communication
• Communicate incident details, recommendations and investigation findings to customers in a clear, professional and customer-oriented manner.

• Threat Analysis & Correlation
• Correlate information from multiple data sources to identify malicious activity, emerging threats and attack patterns across complex environments.

• Documentation & Continuous Improvement
• Document investigations, findings and response actions within ticketing and case management systems, while contributing to threat hunting, detection improvements and SOC process optimization.

• Collaboration & Security Enhancement
• Work closely with international colleagues, customers and technology partners to strengthen overall security capabilities and improve customer security posture.

Your Profile

• •Experience in a Security Operations Center (SOC) , Managed Security Services, Incident Response or a similar cybersecurity role
• •Good understanding of cybersecurity threats, attack techniques and incident handling processes
• •Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar or similar technologies
• •Familiarity with EDR/XDR solutions, Microsoft Defender, network security monitoring and cloud security services
• •Strong analytical and investigative skills, with the ability to assess and prioritize security events effectively
• •Experience working in a customer-facing environment and communicating technical findings to various audiences
• •Ability to work under pressure, manage multiple incidents and maintain attention to detail
• •German language proficiency at C1 level or native speaker (mandatory)
• •Strong English communication skills

The minimum annual gross salary under the collective agreement of Telekom Austria AG for this position is EUR 51.042,74 (40-hour full-time work week). Depending on qualifications and professional experience, there is a willingness to offer a higher salary.