SOC Analyst, SIEM Engineer

• Monitor and analyze security-relevant events from SIEM, EDR, firewalls, networks, servers, cloud services, and other IT systems
• Assess and prioritize security alerts according to their criticality, risk, and potential impact on business operations
• Develop and optimize correlation rules, detection use cases, dashboards, and reports
• Support the investigation, containment, and post-incident handling of IT security incidents
• Document incidents, analysis results, decisions, and measures in a traceable and auditable manner
• Collaborate with IT Infrastructure, IT Operations, Information Security, Data Protection, and external security partners
• Contribute to security projects, tool implementations, and the ongoing development of the security monitoring landscape

• Several years of professional experience in IT security, security operations, SIEM engineering, or IT infrastructure
• Very strong knowledge of security monitoring, log analysis, SIEM operations, and incident detection
• Several years of experience with FortiSIEM
• Ideally, knowledge of additional SIEM and security tools such as Microsoft Sentinel, Splunk, Elastic, QRadar, or comparable solutions
• Knowledge of Windows, Linux, networks, firewalls, Active Directory, cloud services, and endpoint security
• Willingness to complete relevant training and certifications
• Ability to analyze complex technical matters in a structured, precise, and risk-oriented manner
• Responsible, discreet, and composed approach when working in time-critical situations
• Fluent German and English language skills

• Flexible working hours with a high degree of autonomy
• Workplace in Pulsnitz, located in a historic building with modern facilities
• Needs-based certifications and professional development opportunities
• Respectful workplace culture, open communication, and dynamic teams
• 30 days of annual leave