Security Incident Response Analyst

Scalable GmbH; Deutschland; On-site; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Relocation support

Work from abroad

Prime+ Broker subscription

Urban Sports Club discount

Education budget

Job summary

Scalable Capital is seeking a Senior Security Analyst to lead incident response and threat intelligence workflows in a fast-growing FinTech environment. You will drive end-to-end incident handling, perform deep forensics, and develop automated playbooks to speed responses across cloud and on-premise systems.

Ideal candidates have hands-on SOC experience, proficiency with SIEM/SOAR, EDR, and AWS/container security, plus strong communication skills to brief technical and executive stakeholders.

Qualifications

• Extensive hands-on SOC/incident response experience, including Tier 2–3 tasks.
• Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets.
• Hands-on experience with AWS security controls and container security.
• Strong understanding of network protocols, endpoint security, and common attack vectors.
• Ability to use Python or similar scripting languages for security automation.
• Relevant certifications such as GCIH, GCFA, CISSP or equivalent are a plus.
• Excellent analytical mindset and ability to work under pressure.
• Strong communication skills, capable of translating technical findings to non-technical audiences.

Responsibilities

• Lead end-to-end incident response lifecycle from detection to containment.
• Drive threat intelligence processes by analyzing trends and integrating external feeds.
• Perform host and network forensics to identify root causes.
• Design and refine automated SOAR playbooks.
• Conduct proactive threat hunts across environments.
• Provide technical leadership and mentor junior analysts.
• Prepare detailed incident reports for technical and executive stakeholders.

Skills

SOC incident response

SIEM/SOAR

EDR tools

Forensic toolsets

AWS security

Container security

Network security

Python scripting

Communication

Tools

SIEM

SOAR

EDR

Forensic tools

Job description

Описание:

Scalable Capital is a leading digital investment and banking platform with a full banking licence, empowering people across Europe to shape their own finances. Scalable Broker makes it easy and affordable for clients to invest professionally in stocks, ETFs, cryptocurrencies, and derivatives, as well as set up savings plans. Scalable Wealth, the digital wealth management service, offers clients professional investment in ETF portfolios, and is also adopted as a white-label solution by banks and other B2B partners. The company’s offerings are rounded off by attractive interest rates, loans, and private equity. With the European Investor Exchange, Scalable Capital offers an exchange specifically for retail investors. Over one million clients have already entrusted more than €50 billion to the platform. Founded in 2014, Scalable Capital now employs over 700 people across Munich, Berlin, Vienna, Milan, and London. Together with the founding and management team, including Erik Podzuweit and Florian Prucker, they are working on a new generation of financial services. Visit our finance blog or check out our Social Media channels to find out what our Expert Teams have to say. Our Company Values guide us every day in how we work and collaborate. To learn more about them, you can find our values here (English).

Задачи:

Our SOC team is expanding! We are looking for a Senior Security Analyst to lead our advanced investigation and threat intelligence workflows. This role is designed for a technical expert who thrives on complex incident response and proactive threat hunting. Incident Response: Drive the end-to-end lifecycle of security incidents, from initial detection through to advanced containment and recovery. Threat Intelligence: Drive the threat intelligence process by analyzing emerging trends and integrating external feeds into our detection logic. Forensic Analysis: Perform deep-dive host and network forensics to identify root causes and persistence mechanisms. Automation & Playbooks: Design and refine automated SOAR playbooks to increase the speed and consistency of our response. Proactive Hunting: Execute hypothesis-driven threat hunts across our environments. Technical Leadership: Act as an escalation point for complex alerts and mentor junior analysts on advanced investigative techniques. Stakeholder Communication: Generate detailed incident reports and present findings to both technical teams and executive stakeholders, ensuring clarity on impact and resolution.

Требования:

• Extensive hands-on SOC or incident response experience, including Tier 2 / Tier 3 responsibilities
• Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets
• Hands-on experience with AWS security controls and container security
• Strong understanding of network protocols, endpoint security, and common attack vectors
• Ability to use Python or similar scripting languages for security automation and data analysis
• Relevant certifications such as GCIH, GCFA, CISSP, or equivalent are a plus
• Excellent analytical mindset, attention to detail, and ability to thrive under pressure
• Strong communication skills, capable of translating technical findings to non-technical audiences

Additional Information

• Be part of one of the fastest-growing and most visible Fintech startups in Europe, creating innovative services that have a substantial impact on the lives of our customers
• Work with an international, diverse, inclusive, and ever-growing team that loves creating the best products for our clients
• Be productive with the latest hardware and tools
• Learn and grow by joining our in-house knowledge sharing or career development sessions and spending your individual Education Budget
• Learn and experience German culture first hand by joining our free German language classes
• International relocation support is provided if required
• Opportunity to work from abroad
• Benefit from an attractive compensation package and from the company pension scheme
• Monthly contribution of 50% for the ‘Deutschland Jobticket’
• Say goodbye to order commissions and say hello to your complimentary subscription of Scalable Capital's PRIME+ Broker
• Enjoy flexible and discounted sports activities with Urban Sports Club