SOC Analyst / Cyber Defense Analyst - Germanophone - Munich (Germany)

Project overview

Freelance | Munich, Germany | 100% onsite | Start February 1, 2027 | 4-year mission | Native or bilingual German mandatory

Context

We are recruiting for the cybersecurity and risk management subsidiary of a major European aerospace and space group. You will strengthen its Security Operations Center (SOC), which protects its clients' systems, during a period of high activity.

Responsibilities

Profile

• Continuously monitor security tools (SIEM, EDR, SOAR, network traffic) to detect abnormal behavior and attack techniques (MITRE ATT&CK)
• Triage and analyze alerts: dismiss false positives, qualify real incidents
• Apply initial containment measures following established procedures
• Document analyses, write escalation tickets to expert teams, and ensure handovers between teams
• Conduct proactive threat hunting (IoC / TTP) after the publication of new vulnerabilities or threat intelligence alerts
• Propose improvements to SIEM / EDR detection rules and procedures based on recurring alerts
• 3 to 5 years of experience as a SOC analyst, within an MSSP or a corporate SOC
• Mastery of Splunk and Palo Alto solutions (essential); Microsoft Sentinel, Defender for Endpoint, or HarfangLab appreciated
• Analysis of raw logs (syslog, firewall, DNS, proxy, authentication) and basic packet analysis
• Good foundation in networking, Windows and Linux systems, Active Directory
• Certifications appreciated: Splunk Core / Power User, SC-200, AZ-900, Blue Team Level 1/2, Palo Alto XDR Analyst, GCIH / GCIA / GCFA
• Native or bilingual German mandatory, professional English (B2/C1 minimum)
• Position subject to a security clearance procedure required by the client: open to EU nationals, clean criminal record required
• You live in Germany or are willing to relocate for the mission

Project details

• Start: 2027-02-01
• Duration: 48 mois
• Location: Munich (Allemagne), FR
• Languages: French