> Markdown version of [/jobs/ext/3879842-security-analyst-incident-response-all-genders](https://www.wearedevelopers.com/jobs/ext/3879842-security-analyst-incident-response-all-genders). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst - Incident Response (all genders)

- **Company:** About You
- **Location:** Hamburg, Germany
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** PHP (Programming Language), Artificial Intelligence, Amazon Web Services, Application Firewall, Microsoft Azure, Command-Line Interface, Cyber Security, System Configuration, Linux, Digital Forensics, Intrusion Detection and Prevention, Python (Programming Language), Laravel, Security Information and Event Management, Scripting, Cloud Platform System, Chatbots, Cloudflare, Terraform
- **Published:** October 23, 2026
- **Apply:** https://startup.jobs/security-analyst-incident-response-all-genders-about-you-se-co-kg-10550623

## About the Role

* Proven background in IT security (2-4 years of hands-on experience in incident response, security operations (SOC), or digital forensics)
 * Hands-on experience with incident response, blue teaming, or digital forensics with exposure to cloud environments (AWS/Azure/GCP)
 * Practical experience using and configuring SIEM tools (e.g., investigating alerts, querying logs)
 * Strong team player with comfortable cross-functional technical communication skills
 * Ability to write scripts to automate daily tasks in Python (or a similar scripting language)
 * Familiarity with using modern AI-assisted tools to streamline analysis or automation tasks (not using AI as a chatbot, but doing agentic work)
 * Solid command of Linux operating system fundamentals and command-line usage
 * Basic experience managing or configuring web application firewalls (WAF), preferably Cloudflare
 * Good communication skills with the ability to convey technical findings clearly to both technical peers and non-technical stakeholders
 * Fluent English skills (spoken and written)

Nice to Have:

 * Certificates:
 + Trainings from SANS / GIAC
 + OffSec OSIR
 + HackTheBox / TryHackMe incident response challenges
 * Knowledge of Laravel / PHP.
 * Experience with AWS / GCP.
 * Experience with Gitlab CI/CD Pipelines.
 * Experience with Terraform / Terragrunt.
 * Experience with digital forensics.

## Description

* Deployed, configured, and maintained DFIR tools and infrastructure to preserve incident readiness
 * Served as the first responder for security incidents, driving digital forensics investigations and post-incident risk mitigation
 * Maintained, optimized, and fine-tuned SIEM platforms to maintain reliable high-fidelity detection capabilities
 * Enhanced monitoring and scanning systems using Python to automate routine security workflows and identify vulnerabilities
 * Integrated AI technologies into security operations to optimize detection, triage, and threat hunting.
 * Investigated, analyzed, and remediated security alerts across internal systems and cloud environments
 * Created and updated incident response playbooks to standardize workflows and shorten response times
 * Tracked emerging cyber threats and zero-day vulnerabilities to implement proactive security controls