Cyber Security Analyst

Arcus Search; München; Hybrid; EUR 60,000 - 90,000; Full time

Job summary

Arcus Search is seeking a Security Operations Analyst for a new security function supporting European operations across 8 countries. You will manage identity and email security, triage alerts, and support incidents using Microsoft 365 Defender and Sentinel.

You will be the first contact for security questions, translating complex rules into user-friendly guidance. Fluent English required; German/Dutch preferred. Based in Munich with on-site work and growth potential.

Qualifications

• 2 years in IT Security Operations or IT operations.
• Hands-on exposure to Microsoft 365 / Azure environments.
• Clear written findings, tickets, and escalations.
• English fluency; German/Dutch preferred; other European languages a plus.
• Team player with willingness to support adjacent areas.

Responsibilities

• Manage the IT-Security Mailbox; process user requests with clear guidance.
• Handle identity lifecycle tasks in Microsoft Entra ID and MFA troubleshooting.
• Monitor and remediate phishing; manage Defender for Office 365 settings.
• Track CVEs and coordinate remediation with IT operations.
• Be the first contact for day-to-day security questions and best practices.
• Triage alerts in Microsoft Sentinel; distinguish true threats from false positives.
• Support initial response to incidents and escalate complex cases.
• Assist in gathering threat intel and prepare security reports for leadership.
• Track security baseline compliance across Azure tenants; report deviations.

Skills

Effective communication

Team player

English fluent

German or Dutch

Analytical mindset

Tools

Microsoft 365 / Azure

Defender for Office 365

Microsoft Sentinel

Entra ID

Job description

Security Operations Analyst

My client is establishing a dedicated Security department as part of a strategic organizational transformation. The SecOps team is the operational backbone of this new structure, responsible for keeping our European operations across 8 countries secure in a modern Microsoft 365 E5 / Defender XDR environment.

Our philosophy:

Mindset and curiosity come first. Technical skills can be learned on the job, we invest in certifications and structured development from day one.

Job Profile:

We are looking for a person who feels comfortable on the human side of security operations and on the front lines of detection. You manage digital identities, protect email communication, and as the first port of call when colleagues need guidance, or triage alerts, and work on support incidents. If you thrive on bringing structure to complexity and helping people stay secure without feeling blocked, we are looking forward to meeting you.

Key Responsibilities:

• Request Fulfillment:Manage the IT-Security Mailbox; process user requests and provide clear, friendly guidance on security policies
• IAM Security:Handle identity lifecycle tasks in Microsoft Entra ID, access reviews, MFA troubleshooting, privilege hygiene
• Email & Collaboration Security:Monitor and remediate phishing attempts; manage security settings in Defender for Office 365
• Vulnerability Hygiene:Track open CVE’s and coordinate remediation with IT Operational teams
• Security Advisory:First point of contact for employees on day-to-day security questions and best practices
• Security Monitoring (SOC/SIEM):Daily triage of alerts in Microsoft Sentinel , distinguish false positives from real threats
• Incident Management:Support initial response to security incidents; escalat complex cases
• Intel & Reporting:Assist in gathering threat intelligence and prepare regular security reports for leadership
• Compliance Monitoring:Track security baseline compliance across Azure tenants and report deviations

Required Qualifications:

• 2 years in IT Security Operations, IT operations; motivated career starters with security affinity equally welcome
• Hands on exposure to Microsoft 365 / Azure environments
• Communicates clearly in writing, findings, tickets, and escalations are documented properly
• English fluent (working language); Dutch and/or German strongly preferred; additional European languages (French, Italian) a plus
• Team player: willing to support adjacent areas when the team needs it

Preferred Certifications (on-the-job acquisition supported):

• Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)
• Microsoft Certified: Security Operations analyst (AZ-200)
• Microsoft Certified: Azure Fundamentals (AZ-900)

Mindset We're Looking For:

• Service Orientated:You see yourself as an enabler. Security should empower, not block
• Structure & Organization:You can manage a high volume of requests without losing track of priorities
• Stakeholder Empathy:You translate technical rules into user-friendly language with patience
• Analytical Curiosity:You enjoy solving puzzles and are not satisfied until you understand what really happened
• Learning Drive:Strong desire to develop deep technical skills. Threat Hunting and TI are where this role grows
• Reliability:Disciplined approach to monitoring tasks; you don't skip alert queues on quiet days