Senior Security Operations Analyst

🔐 Job Title:

Senior Security Operations Analyst

📍 Location: Frankfurt, Hesse, Germany (Global Role, On-Call Rotation)

💼 Employment Type: Full-Time

📢 Reports To: Information Security Manager, Security Operations & Incident Response

🌍 About CoinDesk

CoinDesk is a globally recognized media and data company at the forefront of the crypto and blockchain industry. Since its acquisition by Bullish in 2023 (a regulated digital asset exchange), CoinDesk operates independently with a dedicated editorial committee. It’s known for:

• Award-winning journalism
• Consensus: the world’s largest crypto event
• Robust market and indices data

🛡️ Role Overview

As a Senior Security Operations Analyst, you'll play a key role in protecting CoinDesk’s digital infrastructure. You will be involved in:

• Monitoring security incidents in real time
• Running threat detection and response efforts
• Coordinating incident management processes
• Enhancing overall threat posture through analysis and automation

This role is high-impact and hands-on, requiring deep experience with SIEM, threat hunting, and cloud security tools.

📌 Key Responsibilities

✅ Daily Operations

• Monitor security alerts and data via SIEM tools (e.g. Splunk, Google Chronicle)
• Assist SOC Manager with meeting daily Service Level Objectives

🧠 Threat Hunting & Detection

• Build detection rules/use cases in the SIEM
• Proactively hunt threats using frameworks like MITRE ATT&CK
• Research vulnerabilities and current threat landscape

🔥 Incident Response

• Handle real-time incidents: containment, escalation, forensics
• Maintain and refine incident response plans and SOPs
• Document all security events and generate reports for stakeholders

🤝 Collaboration

• Work cross-functionally with IT, engineering, and compliance teams
• Participate in the on-call rotation for after-hours response

🎓 Qualifications & Skills Required

Must-Haves

• 5+ years in Security Operations, SOC, or Incident Response
• Strong experience with:
• SIEM tools (Splunk, Google Chronicle)
• Threat detection and response frameworks
• Linux system security and hardening
• Security appliances: IDS/IPS, EDR, WAF
• Networking protocols and cybersecurity tools
• Excellent written and verbal communication
• Analytical mindset, process-driven, detail-oriented

Education

• Bachelor’s degree in Cybersecurity, Computer Science, or related field (or equivalent work experience)

🌟 Bonus Points

• Certifications: CISSP, CISM, GCIH, GCFA, GCIA, Splunk Power User
• Experience with:
• Forensics and malware analysis
• Cloud platforms: AWS, GCP, Azure
• Global or multi-region security ops

🧭 Location & Logistics

• Frankfurt-based (on-site or hybrid model may apply)
• Willingness to work across time zones
• Participation in a 24/7 on-call rotation