SOC Analyst

Do you want to not only recognize cyber threats, but also actively contribute to ensuring that a company remains secure and operational? Then take on a central role in our Security Operations Center and work with the team to ensure that security-relevant incidents are quickly detected, assessed, and contained.

Your everyday life, only without everyday life

• You monitor all security-relevant events in our global IT systems around the clock.
• You identify and analyze security incidents and prioritize them based on their criticality, for example in Microsoft Sentinel.
• You independently derive appropriate measures from analyzed incidents.
• You filter out the truly critical security incidents from a large number of reports and initiate the necessary immediate measures.
• You respond immediately to critical incidents , lock affected user accounts, and ensure that threats are quickly contained.
• You contribute to ensuring that employees are not affected by security incidents and that business operations can continue without interruption.

Here's where you can get involved

• You independently assess security incidents and decide when immediate action is required.
• You will support the continuous development and optimization of our detection mechanisms.
• You will actively contribute to the further development of our Security Operations Center processes.
• You document and report security incidents in a comprehensible and audience-appropriate manner.
• You contribute your knowledge to internal training sessions and support professional exchange within the team.

Your environment: Team, tools, collaboration

Team & Setup

• You work in a Security Operations Center (SOC).
• You are part of a global security team.
•  

Tools & Working Methods 

• You work with Microsoft Sentinel as well as other Security Information and Event Management (SIEM) solutions. 
• You use Microsoft Defender, Endpoint Detection and Response (EDR) solutions and other detection and response tools.  
• You prioritize security incidents based on defined criticality levels and initiate measures independently. 

Your learning curve at COSMO CONSULT 

Weeks 1 to 4: Arriving and understanding 

• You will learn about our security landscape, systems, and monitoring processes.
• You will familiarize yourself with existing detection mechanisms and SOC processes.
• Initial evaluations of simple alerts under guidance.
• Getting to know the interfaces with IT Operations, Workplace, Infrastructure, Compliance, Data Protection and ISO
•  

After 3 months: Take over and implement.

• You independently analyze and prioritize security incidents.
• You use the security tools securely in your daily operations.
• You take responsibility in the incident response process.

After 6 months: Further development and co-creation

• You contribute suggestions for improving detection mechanisms and SOC processes.
• You will support the continuous optimization of our security monitoring.
• You actively share your knowledge within the team and support internal training sessions.

You bring the following:

• You have already worked as a SOC Analyst and are familiar with the processes and tools of a Security Operations Center from practical experience, regardless of industry or company size.
• You have excellent knowledge of IT security as well as network and system architectures and understand how attacks work and how systems are secured.
• You have experience using Microsoft Sentinel, Microsoft Defender, EDR, SIEM and similar detection and response solutions.
• You can independently assess the criticality of security incidents and know when immediate action is required.
• Ideally, you have experience in forensic analysis and root cause analysis of security incidents.
• Ideally, you have experience in documenting and reporting security incidents.
• You enjoy sharing your knowledge with others and participating in internal training.
• You communicate confidently in German and English. A minimum of B2 level English proficiency is required.
• 
  

SOC Analyst

Do you want to not only recognize cyber threats, but also actively contribute to ensuring that a company remains secure and operational? Then take on a central role in our Security Operations Center and work with the team to ensure that security-relevant incidents are quickly detected, assessed, and contained.

Your everyday life, only without everyday life

• You monitor all security-relevant events in our global IT systems around the clock.
• You identify and analyze security incidents and prioritize them based on their criticality, for example in Microsoft Sentinel.
• You independently derive appropriate measures from analyzed incidents.
• You filter out the truly critical security incidents from a large number of reports and initiate the necessary immediate measures.
• You respond immediately to critical incidents , lock affected user accounts, and ensure that threats are quickly contained.
• You contribute to ensuring that employees are not affected by security incidents and that business operations can continue without interruption.

Here's where you can get involved

• You independently assess security incidents and decide when immediate action is required.
• You will support the continuous development and optimization of our detection mechanisms.
• You will actively contribute to the further development of our Security Operations Center processes.
• You document and report security incidents in a comprehensible and audience-appropriate manner.
• You contribute your knowledge to internal training sessions and support professional exchange within the team.

Your environment: Team, tools, collaboration

Team & Setup

• You work in a Security Operations Center (SOC).
• You are part of a global security team.
•  

Tools & Working Methods 

• You work with Microsoft Sentinel as well as other Security Information and Event Management (SIEM) solutions. 
• You use Microsoft Defender, Endpoint Detection and Response (EDR) solutions and other detection and response tools.  
• You prioritize security incidents based on defined criticality levels and initiate measures independently. 

Your learning curve at COSMO CONSULT 

Weeks 1 to 4: Arriving and understanding 

• You will learn about our security landscape, systems, and monitoring processes.
• You will familiarize yourself with existing detection mechanisms and SOC processes.
• Initial evaluations of simple alerts under guidance.
• Getting to know the interfaces with IT Operations, Workplace, Infrastructure, Compliance, Data Protection and ISO
•  

After 3 months: Take over and implement.

• You independently analyze and prioritize security incidents.
• You use the security tools securely in your daily operations.
• You take responsibility in the incident response process.

After 6 months: Further development and co-creation

• You contribute suggestions for improving detection mechanisms and SOC processes.
• You will support the continuous optimization of our security monitoring.
• You actively share your knowledge within the team and support internal training sessions.

You bring the following:

• You have already worked as a SOC Analyst and are familiar with the processes and tools of a Security Operations Center from practical experience, regardless of industry or company size.
• You have excellent knowledge of IT security as well as network and system architectures and understand how attacks work and how systems are secured.
• You have experience using Microsoft Sentinel, Microsoft Defender, EDR, SIEM and similar detection and response solutions.
• You can independently assess the criticality of security incidents and know when immediate action is required.
• Ideally, you have experience in forensic analysis and root cause analysis of security incidents.
• Ideally, you have experience in documenting and reporting security incidents.
• You enjoy sharing your knowledge with others and participating in internal training.
• You communicate confidently in German and English. A minimum of B2 level English proficiency is required.
•