Senior SOC Analyst — Threat Hunting & Automation (Hybrid)

Bitpanda; Town of Vienna (WI); Hybrid; USD 103,000 - 148,000; Full time

Benefits offered by this job

Hybrid working model

Stock option plan

OpenUP wellbeing program

Extra paid time off

Job summary

Bitpanda is seeking a Senior SOC Analyst to advance our security operations and threat detection capabilities. You will drive incident response, threat hunting and automation within a hybrid setup that blends onsite collaboration with remote work.

The role may include relocation to Vienna for the right candidate. You will design detections for real-world attacker techniques, coordinate across teams, and enhance our cloud security posture in AWS and related tooling.

Qualifications

• Hands-on security engineering experience with incident response, threat hunting and SOC tooling.
• Experience designing detections, automating workflows and measuring security outcomes.
• Cloud security monitoring and system hardening across AWS or similar environments.

Responsibilities

• Detection engineering: own the detection library strategy and quality in Elastic Security.
• Lead investigations and threat hunting across AWS, Elastic, Datadog; refine playbooks.
• Build automated investigation, enrichment, and response workflows using SOAR and APIs.
• Strengthen cloud security monitoring and tooling; support ISO 27001, PCI DSS, and DORA compliance.
• Mentor engineers, influence architecture, and promote security best practices across Bitpanda.
• Participate in a weekly on-call schedule with the security team.

Skills

Incident response

Threat hunting

SIEM

Digital forensics

Scripting

Tools

Elastic Security

ES|QL

KQL

AWS

Datadog

Job description

Bitpanda is seeking a Senior SOC Analyst to advance our security operations and threat detection capabilities. You will drive incident response, threat hunting and automation within a hybrid setup that blends onsite collaboration with remote work.

The role may include relocation to Vienna for the right candidate. You will design detections for real-world attacker techniques, coordinate across teams, and enhance our cloud security posture in AWS and related tooling.