(Senior) SOC Analyst Engineer*

Berenberg; Hamburg; On-site; EUR 70,000 - 100,000; Full time

Benefits offered by this job

Flexible working hours

30 days annual leave

Mentor system and training programs

Lunch subsidies and staff restaurant

Company health and sports programmes

On-site Hamburg office

Job summary

Berenberg's SPEAR Technology department in Hamburg seeks a Senior SOC Analyst to join the Cyber Security Operations team. You will detect, investigate and respond to security incidents, conduct forensic analyses and contribute to incident response playbooks.

You will work with SIEM (Splunk), IDS/IPS, firewalls and cloud platforms (Azure, Google Cloud), mentor colleagues and help strengthen the bank's threat intelligence and proactive security posture.

Qualifications

• 2–4 years of SOC experience focused on incident response in financial services.
• Degree in Information Security, Computer Science or related field; equivalent qualification; CISSP/CISM/CEH advantageous.
• Practical knowledge of SIEM (Splunk) and IDS/IPS, firewalls; experience with Azure and GCP.
• Experience applying AI and automation to security monitoring using SOAR, Python or PowerShell.
• Strong analytical, problem-solving, and communication skills; fluent German and English.

Responsibilities

• Lead and coordinate security incident response activities from detection through recovery.
• Detect, investigate and analyse threats using SIEM (Splunk) and IDS/IPS; review logs and traffic.
• Conduct proactive threat hunting and analyse evolving attack vectors.
• Produce incident reports and advise on improvements with Legal and Risk teams.
• Maintain and improve incident response playbooks and train the SOC team.

Skills

Analytical thinking

Communication skills

German & English fluency

Education

Information Security / Computer Science degree

Tools

Splunk

IDS/IPS

Firewalls

Microsoft Azure

Google Cloud Platform

SOAR

Job description

For ourSPEAR Technology department in Hamburg we are looking to hire a:

Innovation & Technology @ Berenberg

In an era where digital transformation and modern IT infrastructure are reshaping the banking industry, we are building a technology-driven bank where IT professionals work closely with our business divisions.

Our Technology teams offer an environment filled with exciting challenges, from supporting and enhancing legacy systems to implementing cutting-edge technologies such as Artificial Intelligence, Machine Learning and highly automated trading applications.

Your role in the team

Berenberg, one of Europe’s leading investment banks, is seeking a Senior SOC Analyst to strengthen its award-winning Cyber Security Operations team. With a history spanning more than four centuries, Berenberg has built its reputation on trust, innovation and resilience.

As the financial sector faces increasingly complex cyber threats, the CSO team is recognised across the industry for its excellence in defending against sophisticated adversaries and ensuring operational resilience. Joining the team means becoming part of a function that is critical to the bank’s success and highly respected within the wider cyber security community.

As an experienced SOC Analyst, you will play a pivotal role in the team, taking responsibility for detecting, investigating and responding to security incidents. You will conduct in-depth forensic investigations, develop effective incident response strategies and produce comprehensive reports for senior management and relevant stakeholders.

Your expertise will be instrumental in enhancing the bank’s monitoring and detection capabilities, helping to maintain a proactive and resilient security posture. You will also have the opportunity to expand our threat intelligence capabilities and mentor other team members, sharing best practices and driving continuous improvement across our incident response processes.

You will be at the forefront of protecting Berenberg’s digital assets, client relationships and global reputation, supporting a business that operates across global capital markets and serves international institutional clients to the highest standards of performance and service.

We are looking for a motivated, energetic and analytical professional with strong expertise in threat intelligence, incident handling and the technical investigation of cyber threats, ideally gained within the financial services sector.

What will you do?

• Lead and coordinate security incident response activities, from detection through containment, eradication and recovery, implementing remediation measures to secure affected systems and ensure a controlled return to normal operations


• Detect, investigate and analyse threats using SIEM platforms, particularly Splunk, alongside IDS/IPS and other security technologies. Review logs and network traffic to identify suspicious activity, determine root causes and uncover potential vulnerabilities


• Conduct proactive threat hunting and analyse emerging attack vectors to strengthen the organisation’s overall security posture


• Produce detailed incident reports, assess business and technical impacts, and recommend improvements to the cybersecurity strategy. Work closely with Legal and Risk Management teams to ensure incidents are handled in accordance with applicable regulatory requirements


• Maintain and continuously improve incident response procedures, including playbooks, operational processes and security policies, while providing guidance, training and knowledge sharing to strengthen the SOC team’s capabilities

Who are we looking for?

• Two to four years of experience in a Security Operations Centre (SOC), with a focus on incident response and reporting within financial services, alongside a sound understanding of regulated environments. A degree in Information Security, Computer Science or a related field, or an equivalent qualification, is expected. Certifications such as CISSP, CISM or CEH would be advantageous


• Practical knowledge of SIEM platforms, particularly Splunk, as well as IDS/IPS, firewalls and other security monitoring and protection technologies, combined with experience in cloud environments such as Microsoft Azure and Google Cloud Platform


• Hands-on experience applying AI and automation to security monitoring and detection, including alert enrichment, triage and response using SOAR platforms, Python or PowerShell scripting, and AI capabilities integrated into security tools. Sound judgement in identifying where automation adds value, validating AI-generated outputs and recognising where human oversight remains essential


• Strong analytical and problem-solving skills, with the ability to interpret large volumes of data, identify patterns and investigate security-critical issues, complemented by excellent written and verbal communication skills when engaging with both technical and non-technical stakeholders


• A collaborative mindset and experience working closely with Security Operations and Network Operations teams to detect, mitigate and respond to cyber threats. The ability to communicate confidently with senior executives, external partners and regulatory authorities during security incidents is essential, alongside business-fluent German and English

What we offer you:

• Flexible working hours within a 39-hour week


• 30 days of annual leave plus additional days off on December 24 and 31


• A varied and exciting range of tasks in a modern and dynamic environment as well as a respectful working atmosphere


• Targeted support through internal and external training and development programmes


• Berenberg mentor system for structured and smooth onboarding


• Various allowances (e.g. Germany ticket, JobRad, capital formation, a company-financed pension scheme, lunch subsidies or staff restaurant in Hamburg)


• Additional benefits such as family services, working time account (e.g. for sabbaticals), corporate benefits and company health and sports programmes

We are a leading European private bank, with over 430 years of experience and deep rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We’re an ambitious, forward-looking business, backed by centuries of tradition and built on innovation. You’ll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo.

We place great importance on working on site, as we believe that being together in the office not only fosters creativity and efficiency, but also strengthens networks and builds trusting, collegial relationships. For us, this forms the foundation for productive and successful work. Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business – Our future is where you take us!

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential. We’re committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on [e-mail] to discuss.