SOC Automation Analyst - SOAR & Incident (all humans)

Make a difference in the financial life of millions of people: At Erste Digital you are co-creating the digital future, in which better financial health is possible. #believeinyourself
We are part of Erste Group – the largest banking group in Central and Eastern Europe with more than 2,500 branches and over 45,000 employees. Our more than 2,000 IT experts and enthusiasts are the bank's Digital Muscle.
Help us automate the work that should not require an analyst
Our Cyber Defense Center protects the digital services used by millions of customers across Erste Group.
We are looking for a SOC Automation Analyst who combines security operations experience with an engineering mindset. You will work with real security incidents - but also look beyond the individual alert and ask: How can we detect this earlier, enrich it faster and respond more consistently next time?
Your mission is to turn repeatable SOC activities into reliable automation, allowing our analysts to focus on where human judgment makes the difference.
What to do:
Identify investigation and response activities suitable for automation
Design, build and maintain SOAR playbooks for enrichment, triage, notification, containment and remediation
Integrate security and IT platforms through APIs, webhooks and connectors
Develop automation using Python, PowerShell or comparable technologies
Build reliable workflows with appropriate approval points, error handling, logging, permissions and monitoring
Analyze incidents and identify opportunities to improve playbooks, automations and response procedures
Collaborate with SOC analysts, security engineers, threat intelligence specialists and service owners across our international organization

Work arrangement
No