IT Security Analyst, 3rd Level

Proact Deutschland

IT-Security Analyst actively combating and analyzing cyber threats for clients using modern SIEM and SOAR solutions. Supporting clients during security incidents and enhancing security operations.

Posted 7/22/2026full-timeKöln • 🇩🇪 GermanyMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cyber Security, particularly within Security Operations Centers, with a focus on Incident Response, Endpoint Detection & Response, and SIEM/SOAR solutions. Proficient in developing detection rules and automations while effectively communicating in both German and English.

Highest-signal resume keywords

Security Operations Center ExperienceIncident ResponseEndpoint Detection & ResponseSIEM/SOAR SolutionsBilingual in German and English

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident ResponseEndpoint Detection & ResponseSIEM SolutionsSOAR SolutionsDetection Rule DevelopmentSecurity Incident AnalysisRoot Cause AnalysisSecurity Posture ImprovementAnalytical SkillsStructured Approach

Soft Skills

Quick ComprehensionKnowledge SharingCollaboration

Tools & Technologies

Microsoft Security StackDefender for EndpointMicrosoft SentinelSecurity Operations Center Tools

Industry Keywords

Cyber SecurityBlue TeamSecurity ExpertiseIT Security CommunitySecurity Trends

About the role

Key responsibilities & impact

Actively assist in defending against and analyzing cyber security attacks on our clients' systems
Support clients in 2nd- and 3rd-level support for security-related questions and in handling active security incidents
Work with modern SIEM and SOAR solutions, analyze security-relevant events and initiate appropriate actions
Onboard new clients to our Security Operations Center and act as their technical point of contact
Develop client-specific detection rules, automations and best practices to continuously improve the security posture
Conduct investigations into complex security incidents and support root cause analysis
Actively share your knowledge with colleagues and contribute to the further expansion of our security expertise
Be connected within the IT security community, stay aware of trends and follow industry developments

Requirements

What you’ll need

At least three years of hands-on experience in a Security Operations Center (SOC), Blue Team or a comparable cyber security environment
Solid knowledge of Endpoint Detection & Response (EDR), Incident Response, and SIEM/SOAR solutions — ideally within the Microsoft Security Stack from Defender for Endpoint to Microsoft Sentinel
Quick comprehension, strong analytical skills and a structured approach
Excellent written and spoken German and English

Benefits

Comp & perks

Provision of new, high-performance IT equipment including home office setup; company merchandise such as backpacks/laptop bags, polo shirt and functional jacket
Company pension plan (bAV), occupational disability insurance and group accident insurance
Workplace health management (company bike/JobRad, coaching, benefit@work, etc.)
30 days of annual leave and various special leave days (e.g., marriage, birth)
berufundfamilie-certified employer and childcare allowance
Personal and professional development through numerous employee development programs (e.g., mentoring, collaboration labs, development plans, etc.)
Corporate benefits & Pluxee-Card