Senior SOC Analyst Engineer

Berenberg; Greater London; Hybrid; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave policies

Employee Assistance Programme

Job summary

Berenberg is seeking a Senior SOC Analyst in London to join the Cyber Security Operations team. You will lead incident response, perform in-depth investigations, and craft incident reports for senior management, while helping to enhance monitoring, detection and threat intelligence capabilities across the bank.

The role requires 2–4 years in an SOC with financial services experience, hands-on Splunk, cloud and automation skills, and strong communication in English (German a plus).

Qualifications

• Two to four years of experience in a Security Operations Centre (SOC), with a focus on incident response and reporting within financial services.
• Practical knowledge of SIEM platforms, particularly Splunk, as well as IDS/IPS, firewalls and other security monitoring and protection technologies, with cloud experience (Azure and GCP).
• Hands-on experience applying AI and automation to security monitoring and detection, including SOAR, scripting in Python or PowerShell, and AI-enabled security tools.
• Strong analytical and problem-solving skills, with the ability to interpret large data volumes and communicate with technical and non-technical stakeholders.
• A collaborative mindset and ability to engage with senior executives, external partners and regulatory authorities; fluent English and business-level German.

Responsibilities

• Lead and coordinate security incident response activities from detection to containment, eradication and recovery.
• Detect, investigate and analyse threats using SIEM (Splunk) and other security technologies; review logs and traffic for root causes.
• Conduct proactive threat hunting and analyse emerging attack vectors to strengthen security posture.
• Produce incident reports with business and technical impacts; advise on improvements to cybersecurity strategy and risk controls.
• Maintain and improve incident response playbooks, processes and policies; mentor SOC teammates and share best practices.

Skills

SOC experience

Splunk SIEM

IDS/IPS

Cloud security (Azure, GCP)

SOAR automation

Python

PowerShell

AI in security

Executive communication

German language

Education

Degree in Information Security or Computer Science

Tools

Firewalls

Threat intel platforms

Job description

For our SPEAR Technology department in London we are looking to hire a:

Innovation & Technology @ Berenberg

In an era where digital transformation and modern IT infrastructure are reshaping the banking industry, we are building a technology-driven bank where IT professionals work closely with our business divisions.

Our Technology teams offer an environment filled with exciting challenges, from supporting and enhancing legacy systems to implementing cutting-edge technologies such as Artificial Intelligence, Machine Learning and highly automated trading applications.

Your role in the team

Berenberg, one of Europe’s leading investment banks, is seeking a Senior SOC Analyst to strengthen its award-winning Cyber Security Operations team. With a history spanning more than four centuries, Berenberg has built its reputation on trust, innovation and resilience.

As the financial sector faces increasingly complex cyber threats, the CSO team is recognised across the industry for its excellence in defending against sophisticated adversaries and ensuring operational resilience. Joining the team means becoming part of a function that is critical to the bank’s success and highly respected within the wider cyber security community.

As an experienced SOC Analyst, you will play a pivotal role in the team, taking responsibility for detecting, investigating and responding to security incidents. You will conduct in‑depth forensic investigations, develop effective incident response strategies and produce comprehensive reports for senior management and relevant stakeholders.

Your expertise will be instrumental in enhancing the bank’s monitoring and detection capabilities, helping to maintain a proactive and resilient security posture. You will also have the opportunity to expand our threat intelligence capabilities and mentor other team members, sharing best practices and driving continuous improvement across our incident response processes.

You will be at the forefront of protecting Berenberg’s digital assets, client relationships and global reputation, supporting a business that operates across global capital markets and serves international institutional clients to the highest standards of performance and service.

We are looking for a motivated, energetic and analytical professional with strong expertise in threat intelligence, incident handling and the technical investigation of cyber threats, ideally gained within the financial services sector.

What will you do?

• Lead and coordinate security incident response activities, from detection through containment, eradication and recovery, implementing remediation measures to secure affected systems and ensure a controlled return to normal operations
• Detect, investigate and analyse threats using SIEM platforms, particularly Splunk, alongside IDS/IPS and other security technologies. Review logs and network traffic to identify suspicious activity, determine root causes and uncover potential vulnerabilities
• Conduct proactive threat hunting and analyse emerging attack vectors to strengthen the organisation’s overall security posture
• Produce detailed incident reports, assess business and technical impacts, and recommend improvements to the cybersecurity strategy. Work closely with Legal and Risk Management teams to ensure incidents are handled in accordance with applicable regulatory requirements
• Maintain and continuously improve incident response procedures, including playbooks, operational processes and security policies, while providing guidance, training and knowledge sharing to strengthen the SOC team’s capabilities

Who are we looking for?

• Two to four years of experience in a Security Operations Centre (SOC), with a focus on incident response and reporting within financial services, alongside a sound understanding of regulated environments. A degree in Information Security, Computer Science or a related field, or an equivalent qualification, is expected. Certifications such as CISSP, CISM or CEH would be advantageous
• Practical knowledge of SIEM platforms, particularly Splunk, as well as IDS/IPS, firewalls and other security monitoring and protection technologies, combined with experience in cloud environments such as Microsoft Azure and Google Cloud Platform
• Hands‑on experience applying AI and automation to security monitoring and detection, including alert enrichment, triage and response using SOAR platforms, Python or PowerShell scripting, and AI capabilities integrated into security tools. Sound judgement in identifying where automation adds value, validating AI‑generated outputs and recognising where human oversight remains essential.
• Strong analytical and problem‑solving skills, with the ability to interpret large volumes of data, identify patterns and investigate security‑critical issues, complemented by excellent written and verbal communication skills when engaging with both technical and non‑technical stakeholders
• A collaborative mindset and experience working closely with Security Operations and Network Operations teams to detect, mitigate and respond to cyber threats. The ability to communicate confidently with senior executives, external partners and regulatory authorities during security incidents is essential, alongside business‑fluent German and English

What we offer you:

• Private pension plan - 10% of base salary contribution by Berenberg
• Private Health Insurance
• Enhanced parental leave policies
• Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics

We are a leading European private bank, with over 430 years of experience and deep‑rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We’re an ambitious, forward‑looking business, backed by centuries of tradition and built on innovation. You’ll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo.

We place great importance on working on site, as we believe that being together in the office not only fosters creativity and efficiency, but also strengthens networks and builds trusting, collegial relationships. For us, this forms the foundation for productive and successful work. Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business – Our future is where you take us!

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential. We’re committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on [e-mail] to discuss.