SOC Analyst (m/f/d)

Full Time Senior

Job description

The Ideal Candidate

We're open to candidates at different stages of their career - from those taking their first step into a SOC to seasoned analysts. What matters most is a genuine analytical mindset, curiosity and a willingness to grow with us.

Bachelor's degree in Computer Science, Information Security or a related field - or equivalent professional experience.
Understanding of core security technologies: SIEM/XDR, EDR/AV, IDS/IPS and firewalls, plus fundamentals of systems, networking and identity (Active Directory / Entra ID).
Familiarity with the modern threat landscape, common attack techniques and the MITRE ATT&CK framework.
Working knowledge of cloud and identity security concepts (Microsoft 365 / Azure / AWS).
A structured, detail-oriented approach and the ability to stay calm under pressure.
Strong communication skills: the ability to explain technical findings clearly and translate them into actionable, customer-friendly language
Willingness to participate in shift work and/or an on-call rotation as part of our 24/7 coverage.
Very good English is required; German is a strong advantage (much of our client base and headquarters are German-speaking). Romanian is a plus.

Advantageous

Hands-on experience in a SOC or comparable role, including investigation, correlation and root-cause analysis.
Scripting/automation skills (Python, Bash, PowerShell) and experience with playbook/SOAR customization.
An understanding of how AI and automation are reshaping detection and triage, and an interest in working alongside these tools.
Certifications such as CompTIA Security+ / CySA+, Blue Team Level 1/2 (BTL1/BTL2), Microsoft SC-200, GIAC (GSEC/GCIH/GCIA) or CEH.
Exposure to OT/IoT security.

Job Description

As a SOC Analyst you help identify, analyse and respond to cyber threats in our clients' environments. Your duties include:

Security Event Monitoring: Continuously monitor security events, alerts and correlated incidents across SIEM/XDR, EDR and network telemetry to detect potential threats.
Triage & Investigation: Perform triage and in-depth investigation to understand the nature, scope and root cause of security incidents.
Incident Response & Handling: Take first-response and containment actions, coordinate remediation, and support cyber incidents at customers directly (myIncident.ai).
Detection & Automation: Help tune detections, reduce false positives, and build or refine SOAR / Automated Threat Hunting playbooks to close coverage gaps.
Threat Hunting: Proactively hunt for signs of malicious activity using threat intelligence and MITRE ATT&CK TTPs.
Security Enhancements: Identify weaknesses and recommend improvements to detection coverage and client security posture.
Reporting & Documentation: Produce clear incident tickets and regular reports on incidents and trends for internal teams, clients and management.

You'll work in a multi-tenant MSSP environment, supporting several clients, so clean documentation, situational awareness and disciplined escalation matter as much as technical skill.

What we offer

A meaningful role in a growing MSSP where your work directly protects real clients.
Room to grow: as a smaller, close-knit team, we offer broad, varied work and a genuine path to develop into senior analyst, specialist and engineering roles over time.
A modern, well-equipped working environment with the tools needed to do the job effectively.
Dedicated training & certification budget and continuous professional development.
Work from Abroad program and hybrid flexibility, with occasional visits to our Austrian HQ.
A supportive, collaborative team of security professionals who genuinely enjoy the work.
Competitive compensation and benefits, including voluntary pension fund and private health insurance.

Company Description

ARES Managed Operations S.R.L. is the Managed Security Services (MSSP) arm of the sigmavista group. Together we deliver converged security across IT, OT and IoT - combining 24/7 Managed Detection & Response, SIEM/SOAR operations, threat intelligence and offensive validation into one integrated service for clients across a range of industries.

Our Security Operations Center is built around a modern, automation-first approach, so our analysts spend their time on real threats and meaningful investigation. As routine triage is increasingly handled by automation and AI, our analysts focus on judgement, investigation and response - the work that genuinely requires human expertise. We're growing the team and welcome applications from both early-career and experienced analysts.

ARES Managed Operations S.R.L. is an equal opportunity employer that promotes diversity and inclusion. We encourage candidates of all genders, races, religions, sexual orientations and abilities to apply.

Required skills

incident response python aws azure bash powershell entra id active directory microsoft 365 investigation firewalls it security siem edr gcih xdr triage mitre att&ck ceh mssp soar threat intelligence av comptia security+ gsec ids root-cause analysis threat hunting ips giac gcia microsoft sc-200 comptia cysa+ ot security blue team level 1 btl1 blue team level 2 btl2 soc analyst iot security

SOC Analyst (m/f/d)

Job description

The Ideal Candidate

Job Description

Company Description

Required skills

Sign up to apply

Company information

Find similar jobs

Interested in this position?