Job
In this role, you analyze security data, investigate incidents, and develop tailored detection use cases. You will conduct root cause analyses and automate recurring processes to enhance security posture.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- As a Senior Security Analyst, you monitor and analyze data from our SOC tools, investigate alerts and security incidents, and derive insights from every incident to continuously improve our security posture.
- You continuously monitor and analyze data from our SOC tools and platforms, and work with the team to investigate relevant events, alerts, and information security incidents.
- You respond to security incidents in accordance with our security incident response processes and communicate your investigation findings clearly and appropriately to the relevant stakeholders.
- You conduct or contribute to root cause analyses, document the findings clearly, and support the sustainable elimination of the underlying causes.
- You keep an eye on the threat landscape through tech news, social networks, and Information Sharing and Analysis Centers (ISACs), and assess the potential impact of new attacks and trends on the REWE Group.
- Together with our Security Platform Engineers, you develop new detection use cases based on current threats.
- You create runbooks for recurring incidents to automate or provide targeted support for their resolution.
- You will contribute your experience to building and further developing our SOC platform and help develop an internal SOC service offering.
- You work closely with our infrastructure teams, Information Security, and other colleagues across REWE digital.
- You foster an open feedback culture and a proactive approach to mistakes in the spirit of a learning organization.
Our expectations of you
Qualifications
- You have in-depth experience working with SIEM, XDR, and EDR solutions and can confidently analyze and assess log data, network traffic, and alerts.
- You have a solid understanding of operating systems (Windows, Linux), networks, and cloud environments, and are familiar with common attack techniques.
- You are familiar with frameworks and standards such as MITRE ATT&CK, NIST, and ISO 27001, and know how they are used in a SOC environment.
- Ideally, you have already worked with technologies such as Splunk, SentinelOne, CyberArk, or Proofpoint.
- Ideally, you hold certifications such as GCIH, GCIA, GCFA, BTL1, or equivalent qualifications.
- You communicate confidently in German and English, including with non-technical stakeholders.
- You work analytically, in a structured and self-reliant manner, and are eager to actively shape processes and services.
Experience
- You have several years of professional experience as a Security Analyst, in incident response, or in a Security Operations Center environment.
- You have hands-on experience handling security incidents, ideally including root cause analysis and the fundamentals of IT forensics.
- You have experience with query or scripting languages (e.g., SPL, KQL, Python, or PowerShell) and use automation to make recurring processes more efficient.
What we offer
- Your work-life integration through flexible working hours, remote work, 30 days of vacation plus regional public holidays, leave options (sabbaticals, caregiving leave, etc.), and an on-site childcare center.
- More time for yourself – take advantage of the opportunity to enjoy up to two additional weeks of time off per year; plan them individually and use them flexibly in coordination with your team.
- We invest in your future. With your annual learning and development budget, you can pursue learning opportunities tailored to your individual skill development.
- Updates for you at in-house workshops and events, such as the hackathon and tech talks, as well as weekly stand-ups, regular tech all-hands, and open-door sessions.
- Your impact: developing applications and services for millions of people—with over 1 billion data records processed daily across more than 6 million mobile phones, 32,000 checkout terminals, or 7,300 stores.
- Enjoy a stress-free commute with a discounted Deutschlandticket, a company bike, and parking right outside the door.
- Our networks, such as di.to. – different together, SHINE, f.ernetzt, WomEngineers @REWE digital, and Women's Drive, make us a diverse community and support your personal development.
- The benefits of a large corporate group, such as discounts at REWE, PENNY, toom Baumarkt and the DERTOUR Group; comprehensive healthcare benefits; support for your retirement savings through capital-forming benefits and the REWE pension fund; and special benefits such as holiday and Christmas bonuses, and much more.
Benefits
Health, fitness & fun
Food & drink
Topics you will work on
Job locations
About your employer
As drivers of the digital innovation of the REWE Group, we are responsible for all strategic online activities of one of Europe's leading trade and tourism companies. Our most important brands at home and abroad include REWE, Penny, Billa, Merkur, BIPA, ITS , DER Touristik Meier's World Travel Jahn Reisen and Toom Hardware Store.
- Digital Agency
- Onsite, Hybrid
- Internet, IT, Telecommunication
More jobs
These jobs might also interest you
sino AG, based in downtown Düsseldorf, has been an innovative financial service provider for over 25 years. We specialize in the execution of securities transactions for the most active and demanding traders in Germany. With currently 26 employees, we...
Anyone who joins here not only designs software – they bring machines to life that are recognizable on real construction sites. Software Developer (m/f/d) Basic Engineering Our client is an internationally leading manufacturer of technically...
Operation, monitoring, and further development of the network infrastructure. Administration and configuration of firewalls, routers, and switches. Ensuring network availability, performance, and security. Participation in IT security concepts and...
