SOC Analyst with German (f/m/d) @ A1 Competence Delivery Center

A1 Bulgaria; Wien; On-site; EUR 46,000 - 56,000; Full time

Job summary

Telekom Austria AG in Vienna seeks a Security Operations Center Analyst to monitor threats, investigate incidents and support customers in maintaining a strong security posture.

You will work with SIEM platforms, EDR/XDR solutions, coordinate response activities and communicate findings to customers in a clear, professional manner.

Qualifications

• Experience in a SOC, managed security services, or incident response.
• Proficient with SIEM platforms (Splunk, Sentinel, QRadar).
• German at C1 level or native; strong English communication.

Responsibilities

• Monitor customer environments for threats and policy violations.
• Analyze and triage alerts from SIEM/EDR/XDR and other tools.
• Investigate incidents, assess severity and impact.
• Escalate incidents per procedures and support response activities.
• Communicate incident details clearly to customers.
• Correlate data from multiple sources to identify threats across environments.
• Document investigations and actions in ticketing systems; contribute to improvements.
• Collaborate with international teams and partners to strengthen security.

Skills

SOC experience

SIEM expertise

EDR/XDR familiarity

German C1

English communication

Customer-facing

Cloud/network security

Tools

Splunk

Microsoft Sentinel

QRadar

Microsoft Defender

Job description

As a Security Operations Center (SOC) Analyst, you will play a key role in protecting customer environments against cyber threats. You will monitor security events, investigate incidents, coordinate response activities and support customers in maintaining a strong security posture. The role combines hands-on cybersecurity operations with incident investigation and customer-focused security support, providing exposure to diverse technologies, threat landscapes and international security environments.

Responsibilities

• Security Monitoring & Detection Monitor customer environments for security threats, suspicious activities and policy violations, ensuring timely identification of potential risks.
• Alert Analysis & Triage Analyze and prioritize security alerts generated by SIEM, EDR/XDR, network, cloud and other security technologies, determining appropriate response actions.
• Incident Investigation Investigate security incidents, assess their severity, impact and business relevance, and distinguish between true positive and false positive events.
• Incident Escalation & Response Support Escalate validated incidents to customer security teams in accordance with established procedures and SLAs, while supporting incident response activities when required.
• Customer Communication Communicate incident details, recommendations and investigation findings to customers in a clear, professional and customer-oriented manner.
• Threat Analysis & Correlation Correlate information from multiple data sources to identify malicious activity, emerging threats and attack patterns across complex environments.
• Documentation & Continuous Improvement Document investigations, findings and response actions within ticketing and case management systems, while contributing to threat hunting, detection improvements and SOC process optimization.
• Collaboration & Security Enhancement Work closely with international colleagues, customers and technology partners to strengthen overall security capabilities and improve customer security posture.

Your Profile

• Experience in a Security Operations Center (SOC), Managed Security Services, Incident Response or a similar cybersecurity role
• Good understanding of cybersecurity threats, attack techniques and incident handling processes
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar or similar technologies
• Familiarity with EDR/XDR solutions, Microsoft Defender, network security monitoring and cloud security services
• Strong analytical and investigative skills, with the ability to assess and prioritize security events effectively
• Experience working in a customer-facing environment and communicating technical findings to various audiences
• Ability to work under pressure, manage multiple incidents and maintain attention to detail
• German language proficiency at C1 level or native speaker (mandatory)
• Strong English communication skills

The minimum annual gross salary under the collective agreement of Telekom Austria AG for this position is EUR 51.042,74 (40-hour full-time work week). Depending on qualifications and professional experience, there is a willingness to offer a higher salary.

We are a reliable partner in digitization in 7 countries and offer our business and private customers smart IT services and digital communication solutions. With the best network technology, we connect people worldwide and are always on the lookout for innovations and energy-efficient technologies that benefit our team, customers, society and the environment. Whether you are an IT or Security expert, sales talent, data genius or communication virtuoso - we have the right job for you. Make it happen.