German-Speaking SOC Analyst | Threat Detection & Response

A1 Group; Wien; On-site; EUR 46,000 - 56,000; Full time

Job summary

A1 Group in Austria is seeking a Security Operations Center (SOC) Analyst to protect customer environments against cyber threats. You will monitor security events, investigate incidents, coordinate response activities and support customers in maintaining a strong security posture.

The role blends hands-on security operations with incident investigation and customer-focused support, offering exposure to diverse technologies, threat landscapes and international security environments.

Qualifications

• Experience in a SOC or related cybersecurity role.
• Knowledge of threats, attack techniques and incident handling.
• Hands-on with SIEM platforms (Splunk, Sentinel, QRadar).
• Familiarity with EDR/XDR, Defender, network security and cloud security.
• Strong analytical and investigative skills.
• Customer-facing experience and ability to explain findings.
• Ability to work under pressure and manage multiple incidents.
• German language proficiency at C1 level or native.

Responsibilities

• Monitor customer environments for threats and policy violations.
• Analyze alerts from SIEM/EDR and determine response actions.
• Investigate incidents for severity, impact and relevance.
• Escalate validated incidents per procedures and SLAs.
• Communicate incident details and recommendations to customers.
• Correlate data sources to identify threats and patterns.
• Document investigations and contribute to improvements.
• Collaborate with international colleagues and partners.

Skills

SOC experience

Incident response

SIEM platforms

EDR/XDR

Tools

Splunk

Microsoft Sentinel

QRadar

Job description

A1 Group in Austria is seeking a Security Operations Center (SOC) Analyst to protect customer environments against cyber threats. You will monitor security events, investigate incidents, coordinate response activities and support customers in maintaining a strong security posture.

The role blends hands-on security operations with incident investigation and customer-focused support, offering exposure to diverse technologies, threat landscapes and international security environments.