Cyber Security Analyst

Saunders Scott; Düsseldorf; Remote; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

A leading IT security firm is looking for a SecOps Resource to tune and investigate incidents related to Sophos Intercept X. The ideal candidate has 3–6 years of experience in security operations, is degree-educated or certified, and is fluent in both German and English. The position offers a rolling contract with remote working opportunities in Düsseldorf, Germany.

Qualifikationen

• 3–6 years of security operations experience.
• Background in SysAdmin, Security Engineering, or SOC Analyst roles.
• Able to follow, improve, and document security processes.

Aufgaben

• Tune and investigate incidents from Sophos Intercept X alerts.
• Triaging Sophos Intercept X alerts during Splunk deployment.
• Deliver a 9x5 incident investigation service aligned to German time zone.

Kenntnisse

Fluent in German

Fluent in English

Sophos Intercept X alert tuning

Incident handling across Windows, AD, and cloud setups

Exposure to security engineering

Ausbildung

Degree or certification (e.g., Security+, BTL1, SC-200, AZ-500)

Tools

Sophos Intercept X

Varonis DSPM

Splunk

Defender for O365

Jobbeschreibung

German Speaking is a must, 12 months rolling contract, remote working.

Key Responsibilities of the SecOps Resource

• Tune and investigate incidents as alerted from Sophos Intercept X (as deployed by client).
• During Splunk deployment, focus efforts on triaging Sophos Intercept X alerts.
• Deploy and follow best-practice runbooks for investigation.
• Deliver a 9x5 incident investigation service aligned to German time zone unless otherwise agreed.
• Triage and action quarantine cases, ensuring remediation is completed before releasing devices.
• Monitor, tune, and investigate alerts from the Varonis DSPM platform.
• Support Qualys-based Vulnerability Management services depending on the division of responsibility between client, Tech PS, and this service.

SecOps Analyst Profile

• Two analysts will be assigned.
• Degree-educated or certified (e.g., Security+, BTL1, SC-200, AZ-500) with 3–6 years of security operations experience.
• Backgrounds could include SysAdmin, Security Engineering, or SOC Analyst roles.
• Proficient in :
• Sophos Intercept X alert tuning and investigations
• Varonis DSPM
• Defender for O365
• Splunk for cloud environments
• Fluent in German and English (spoken and written)
• Skilled in incident handling across Windows, AD, and cloud setups
• Able to follow, improve, and document security processes and playbooks
• Comfortable working independently or as part of a wider security team