Security Analyst - Incident Response (all genders)

About You; Hamburg; On-site; EUR 63,000 - 75,000; Full time

Job summary

ABOUT YOU is seeking a Security Analyst - Incident Response in Hamburg for full-time engagement. You will deploy and maintain DFIR tooling, act as first responder to security incidents, and optimize SIEM and monitoring while automating workflows with Python.

The role includes integrating AI to improve detection, triage, and threat hunting across on-premises and cloud environments. The ideal candidate has 2–4 years of hands-on experience in incident response, SOC, or digital forensics, with

Qualifications

• Deployed, configured, and maintained DFIR tools and infrastructure to preserve incident readiness.
• First responder for security incidents, driving digital forensics investigations and post-incident risk mitigation.
• Maintained, optimized, and fine-tuned SIEM platforms for high-fidelity detection.
• Enhanced monitoring and scanning systems using Python to automate security workflows and identify vulnerabilities.
• Integrated AI technologies into security operations to optimize detection, triage, and threat hunting.
• Investigated, analyzed, and remediated security alerts across internal systems and cloud environments.
• Created and updated incident response playbooks to standardize workflows and shorten response times.
• Tracked emerging cyber threats and zero-day vulnerabilities to implement proactive security controls.

Responsibilities

• Deployed, configured, and maintained DFIR tools and infrastructure to preserve incident readiness.
• First responder for security incidents, driving digital forensics investigations and post-incident risk mitigation.
• Maintained, optimized, and fine-tuned SIEM platforms to maintain reliable high-fidelity detection capabilities.
• Enhanced monitoring and scanning systems using Python to automate routine security workflows and identify vulnerabilities.
• Integrated AI technologies into security operations to optimize detection, triage, and threat hunting.
• Investigated, analyzed, and remediated security alerts across internal systems and cloud environments.
• Created and updated incident response playbooks to standardize workflows and shorten response times.
• Tracked emerging cyber threats and zero-day vulnerabilities to implement proactive security controls.

Skills

Incident response

Security operations

Digital forensics

Python scripting

AI in security

Cloud security

SIEM

Linux

WAF

Teamwork

English

Tools

Cloudflare WAF

SIEM platforms

Job description

Security Analyst - Incident Response (all genders)

• Full-time
• Compensation: EUR 62500 - EUR 75000 - yearly

ABOUT YOU is one of Europe’s fastest growing e-commerce companies. Based in Hamburg and Berlin, we operate at the intersection of fashion and technology. Our mission is to rethink online shopping and make it personal and seamless. This takes more than good ideas. It takes people who take initiative and challenge the status quo. We believe in flat hierarchies, direct communication, and pragmatic decisions. No long approval chains. Just ownership, trust, and clear responsibility. We work hard, but we also believe in enjoying the ride together - over team lunches, afterwork drinks, company events, or a quick coffee in between meetings. If this sounds like you, ABOUT YOU could be the right place to bring in your perspective.

• Deployed, configured, and maintained DFIR tools and infrastructure to preserve incident readiness
• Served as the first responder for security incidents, driving digital forensics investigations and post-incident risk mitigation
• Maintained, optimized, and fine-tuned SIEM platforms to maintain reliable high-fidelity detection capabilities
• Enhanced monitoring and scanning systems using Python to automate routine security workflows and identify vulnerabilities
• Integrated AI technologies into security operations to optimize detection, triage, and threat hunting.
• Investigated, analyzed, and remediated security alerts across internal systems and cloud environments
• Created and updated incident response playbooks to standardize workflows and shorten response times
• Tracked emerging cyber threats and zero-day vulnerabilities to implement proactive security controls

• Proven background in IT security (2–4 years of hands‑on experience in incident response, security operations (SOC), or digital forensics)
• Hands‑on experience with incident response, blue teaming, or digital forensics with exposure to cloud environments (AWS/Azure/GCP)
• Practical experience using and configuring SIEM tools (e.g., investigating alerts, querying logs)
• Strong team player with comfortable cross‑functional technical communication skills
• Ability to write scripts to automate daily tasks in Python (or a similar scripting language)
• Familiarity with using modern AI‑assisted tools to streamline analysis or automation tasks (not using AI as a chatbot, but doing agentic work)
• Solid command of Linux operating system fundamentals and command‑line usage
• Basic experience managing or configuring web application firewalls (WAF), preferably Cloudflare
• Good communication skills with the ability to convey technical findings clearly to both technical peers and non‑technical stakeholders
• Fluent English skills (spoken and written)

Nice to Have:

• Certificates:
  • Trainings from SANS / GIAC
  • OffSec OSIR
  • HackTheBox / TryHackMe incident response challenges

Your perks at a glance: Visit our benefits page .

A Place Where You Can Be You

We take it as our responsibility to create an environment where everyone feels welcome, exactly as they are.

Different backgrounds and perspectives make us stronger and shape our culture in ways that matter.

What we stand for internally, we stand for as a brand: acceptance, inclusion, and a fairer approach to fashion.