SOC/CDC Analyst

ROHDE & SCHWARZ GmbH & Co. KG; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Rohde & Schwarz is seeking an experienced cybersecurity incident response professional in the United States. The role involves handling L1–L3 incidents, monitoring security events in real time, and performing in-depth analyses to guide remediation and prevention efforts.

You will support engineers to improve detection rules, document processes, and run trainings for staff. The ideal candidate has 5–8 years in cybersecurity, hands-on SIEM/SOAR/IDS, and cloud security experience, with strong

Qualifications

• Engineering degree in Computer Science, Information Security, or related discipline from a reputed college/university.
• Minimum 5–8 years of professional cybersecurity experience in a multinational organization.
• Hands-on experience with security technologies and tools such as SIEM, SOAR, Firewalls, IDS and Antivirus solutions.
• Proven experience in managing and resolving P1 and P2 security incidents at the enterprise level.
• Strong analytical knowledge of log formats and log analysis techniques.
• Experience in security incident handling and incident response processes.
• Exposure to cloud security technologies and platforms (AWS, Azure, M365).
• Knowledge of MITRE ATT&CK, NIST, ISO 27001 frameworks.
• Experience in Threat Intelligence, Threat Hunting, Vulnerability Assessment.
• Familiarity with ITIL; security certifications are a plus.
• Strong problem-solving skills; experience with Windows and Linux.
• Interest in security automation and process optimization.
• Excellent teamwork, stakeholder management, and communication with fluency in English; German is a plus.

Responsibilities

• Handle L1, L2, and L3 incidents and guide L1/L2 support colleagues.
• Monitor, analyze and triage security events and alarms in real time.
• Perform in-depth analysis to determine root cause, impact and remediation steps.
• Support cybersecurity engineers to improve the CDC with monitoring/detection rule optimization.
• Address incidents promptly in collaboration with the team.
• Proactively monitor threat levels and initiate threat hunting initiatives.
• Create, expand and improve CDC documentation (SOPs, standards, architecture charts).
• Contribute to training on security incidents and best practices.
• Specialize in Incident Response or Forensics and drive maturity improvements.
• Possibility of working in a shift model in the future.

Skills

Communication

Teamwork

Stakeholder management

English fluency

Education

Engineering degree in Computer Science / Information Security

Tools

SIEM

SOAR

Firewalls

IDS

Antivirus

Cloud security (AWS/Azure/M365)

MITRE ATT&CK

NIST / ISO 27001

ITIL familiarity

Threat Intelligence

Job description

Ref. Nummer

3164 mehr

Tasks

• Responsible for handling L1, L2, L3 incidents and guiding L1 & L2 support colleagues.
• Monitor, analyze and triage security events and alarms in real-time based on relevant security threats and risks
• Perform in-depth analysis of security incidents to understand root cause, impact, and to derive recommendations for remediation and eradication
• Support our cybersecurity engineers to continuously improve the CDC (e.g. through creation or optimization of monitoring and detection rules)
• Timely addressing security incidents in cooperation with the whole team
• Pro-actively monitor the current threat level and initiate threat hunting
• Create, expand and improve documentation for the global CDC team (such as SOPs, reference standards, architecture charts)
• Conduct training courses on security incidents and best practices for our employees
• Specialize in one or more exciting expert areas such as Incident Response or Forensics, and pro-actively drive maturity improvement efforts
• Possibility of working in a shift model in the future

Our colleagues provide insider information about

• Daily adventures and challenges
• Our passionate team
• The technologies behind the innovative projects and solutions

Qualifications

• Engineering degree in Computer Science, Information Security, or a related discipline from a reputed college/university.
• Minimum 5 to 8 years of professional experience in Cybersecurity within a multinational organization.
• Hands-on experience with security technologies and tools such as SIEM, SOAR, Firewalls, Intrusion Detection Systems (IDS), and Antivirus solutions.
• Proven experience in managing and resolving P1 and P2 security incidents at the enterprise level.
• Strong analytical knowledge of various common log formats and log analysis techniques.
• Experience in security incident handling and incident response processes.
• Exposure to cloud security technologies and platforms such as AWS, Microsoft Azure, and Microsoft 365 (M365).
• Working knowledge of industry security frameworks and standards, including MITRE ATT&CK, NIST, and ISO 27001.
• Experience in one or more of the following areas is highly desirable:Threat Intelligence,Threat Hunting,Vulnerability Assessment and Analysis
• Familiarity with IT Service Management (ITSM) practices such as ITIL; relevant security certifications will be an added advantage.
• Strong problem-solving skills with the ability to analyze and resolve complex security issues.
• Experience working with Windows and Linux operating systems.
• Interest and exposure to security automation and process optimization.
• Excellent teamwork, stakeholder management, and communication skills with fluency in written and spoken English.
• Knowledge of German language will be considered an added advantage.

Contact and further information

For questions, our chatbot Paul and the recruiting team are available at any time.

Rohde & Schwarz promotes equal opportunities and welcomes applications from people with and without disabilities. We offer an inclusive work environment where all individuals can develop their skills and talents regardless of gender, nationality, ethnic and social background, religion, worldview, age, sexual orientation, identity, and other characteristics.

At Rohde & Schwarz, we develop and produce solutions in the fields of Test & Measurement, Technology Systems, and Networks & Cybersecurity driven by the vision of a safer and connected world. From software to final production, our more than 15,000 employees create.