(Senior) SOC Analyst Engineer*
(Senior) SOC Analyst Engineer*
(Senior) SOC Analyst Engineer*
(Senior) SOC Analyst Engineer*
Joh. Berenberg, Gossler & Co. KG
Bankwesen
Hamburg
Art der Beschäftigung: Vollzeit
66.000 € – 85.500 € (von XING geschätzt)Vor OrtZu den Ersten gehören(Senior) SOC Analyst Engineer*
Über diesen Job
Art der Anstellung
Professional
Arbeitszeit
Vollzeit
Vertragsart
Unbefristet
Offene Stellen
1
Beschreibung & Anforderungen
For our SPEAR Technology department in Hamburg we are looking to hire a:
(Senior) SOC Analyst Engineer*
Innovation & Technology @ Berenberg
In an era where digital transformation and modern IT infrastructure are reshaping the banking industry, we are building a technology-driven bank where IT professionals work closely with our business divisions.
Our Technology teams offer an environment filled with exciting challenges, from supporting and enhancing legacy systems to implementing cutting-edge technologies such as Artificial Intelligence, Machine Learning and highly automated trading applications.
Your role in the team
Berenberg, one of Europe’s leading investment banks, is seeking a Senior SOC Analyst to strengthen its award-winning Cyber Security Operations team. With a history spanning more than four centuries, Berenberg has built its reputation on trust, innovation and resilience.
As the financial sector faces increasingly complex cyber threats, the CSO team is recognised across the industry for its excellence in defending against sophisticated adversaries and ensuring operational resilience. Joining the team means becoming part of a function that is critical to the bank’s success and highly respected within the wider cyber security community.
As an experienced SOC Analyst, you will play a pivotal role in the team, taking responsibility for detecting, investigating and responding to security incidents. You will conduct in-depth forensic investigations, develop effective incident response strategies and produce comprehensive reports for senior management and relevant stakeholders.
Your expertise will be instrumental in enhancing the bank’s monitoring and detection capabilities, helping to maintain a proactive and resilient security posture. You will also have the opportunity to expand our threat intelligence capabilities and mentor other team members, sharing best practices and driving continuous improvement across our incident response processes.
You will be at the forefront of protecting Berenberg’s digital assets, client relationships and global reputation, supporting a business that operates across global capital markets and serves international institutional clients to the highest standards of performance and service.
We are looking for a motivated, energetic and analytical professional with strong expertise in threat intelligence, incident handling and the technical investigation of cyber threats, ideally gained within the financial services sector.
What will you do?
- Lead and coordinate security incident response activities, from detection through containment, eradication and recovery, implementing remediation measures to secure affected systems and ensure a controlled return to normal operations
- Detect, investigate and analyse threats using SIEM platforms, particularly Splunk, alongside IDS/IPS and other security technologies. Review logs and network traffic to identify suspicious activity, determine root causes and uncover potential vulnerabilities
- Conduct proactive threat hunting and analyse emerging attack vectors to strengthen the organisation’s overall security posture
- Produce detailed incident reports, assess business and technical impacts, and recommend improvements to the cybersecurity strategy. Work closely with Legal and Risk Management teams to ensure incidents are handled in accordance with applicable regulatory requirements
- Maintain and continuously improve incident response procedures, including playbooks, operational processes and security policies, while providing guidance, training and knowledge sharing to strengthen the SOC team’s capabilities
Who are we looking for?
- Two to four years of experience in a Security Operations Centre (SOC), with a focus on incident response and reporting within financial services, alongside a sound understanding of regulated environments. A degree in Information Security, Computer Science or a related field, or an equivalent qualification, is expected. Certifications such as CISSP, CISM or CEH would be advantageous
- Practical knowledge of SIEM platforms, particularly Splunk, as well as IDS/IPS, firewalls and other security monitoring and protection technologies, combined with experience in cloud environments such as Microsoft Azure and Google Cloud Platform
- Hands-on experience applying AI and automation to security monitoring and detection, including alert enrichment, triage and response using SOAR platforms, Python or PowerShell scripting, and AI capabilities integrated into security tools. Sound judgement in identifying where automation adds value, validating AI-generated outputs and recognising where human oversight remains essential
- Strong analytical and problem-solving skills, with the ability to interpret large volumes of data, identify patterns and investigate security-critical issues, complemented by excellent written and verbal communication skills when engaging with both technical and non-technical stakeholders
- A collaborative mindset and experience working closely with Security Operations and Network Operations teams to detect, mitigate and respond to cyber threats. The ability to communicate confidently with senior executives, external partners and regulatory authorities during security incidents is essential, alongside business-fluent German and English
What we offer you:
- Flexible working hours within a 39-hour week
- 30 days of annual leave plus additional days off on December 24 and 31
- A varied and exciting range of tasks in a modern and dynamic environment as well as a respectful working atmosphere
- Targeted support through internal and external training and development programmes
- Berenberg mentor system for structured and smooth onboarding
- Various allowances (e.g. Germany ticket, JobRad, capital formation, a company-financed pension scheme, lunch subsidies or staff restaurant in Hamburg)
- Additional benefits such as family services, working time account (e.g. for sabbaticals), corporate benefits and company health and sports programmes