Monitor, investigate, and respond to complex security incidents using Microsoft Sentinel and other security tools.
Perform advanced incident triage, analysis, and escalation activities.
Develop and optimize KQL queries, detection rules, and analytics.
Conduct threat hunting and identify suspicious or malicious activity.
Collaborate with engineering teams to improve security measures and response processes.
Maintain and improve SOC playbooks, runbooks, and operational procedures.
Support and mentor junior analysts within the SOC team.

Minimum 3 years of hands-on experience in SOC operations, cybersecurity, or incident response environments.
Solid experience with Microsoft Sentinel or another SIEM platform.
Solid knowledge of KQL, log analysis, and threat detection.
Good understanding of the MITRE ATT&CK framework and incident response processes.
Strong analytical and problem-solving skills.
Ability to work independently and take ownership of investigations.
Fluency in English.
Nice-to-Have Skills:
Experience with Microsoft Security technologies or Azure security services.
Scripting or automation knowledge (PowerShell, Python, Logic Apps, etc.).
Experience with threat hunting and detection engineering.
Relevant cybersecurity certifications (SC-200, Security+, CySA+, etc.).

🎯 Purpose – using your expertise (in projects at renowned companies such as BMW Group, Henkel or KWS)
🌍 Flexibility – finding your balance (e.g. hybrid and/or remote work, flexible working hours)
📖 Development – constantly improve yourself (e.g. Skaylink Campus, development reviews and employee surveys)
💡 Innovation – contribute your ideas to advance
💻 Equipment – get off to a good start (e.g. high performance Windows laptops and a company cell phone if required)
💪 Support – Feel good (e.g. Employee referral program, Regina Maria, meal vouchers, pension plan)
🏆 Events – get together and celebrate (e.g. summer and Christmas parties, team events, cross-company tech talks)
🧩 Together – We are Skaylink!

Security Analyst, Tier 2

Key skills