Security Analyst - Incident Response (all genders)

Creating, supporting, and ensuring the constant readiness of DFIR tools and associated security infrastructure Acting as the first line of defense during security incidents, conducting digital forensics, and implementing measures for sustainable risk reduction Continuous management, optimization, and tuning of the SIEM system for accurate threat detection Developing monitoring and scanning systems using Python for early vulnerability identification and automation of routine tasks Integrating AI-based solutions into security operations for optimizing analysis, triage, and threat hunting processes Analyzing, assessing, and remediating security alerts in internal systems and cloud environments Creating and updating incident response playbooks to standardize response processes and reduce recovery time Continuous monitoring of current cyber threats and zero-day vulnerabilities, as well as implementing proactive security measures within the company

Proven experience in IT security (2–4 years of practical experience in incident response, Security Operations (SOC), or digital forensics) Hands-on experience in incident response, Blue Teaming, or digital forensics, including experience with cloud environments (AWS/Azure/GCP) Hands-on experience with using and configuring SIEM tools (e.g., alert analysis, log querying) Strong teamwork skills with pronounced interdisciplinary technical communication competence Ability to write scripts in Python (or a similar scripting language) to automate daily tasks Familiarity with modern AI-based tools for optimizing analysis tasks and automation (not just simple AI usage as a chatbot, but agent-based work) Deep knowledge of Linux operating systems fundamentals and command-line usage Basic experience managing or configuring web application firewalls (WAF), preferably Cloudflare Good communication skills, ability to clearly convey technical findings to both IT colleagues and non-technical stakeholders Fluent in English, both spoken and written

Preferred Certifications and training: SANS / GIAC, OffSec OSIR HackTheBox / TryHackMe Incident-Response-Challenges Knowledge of Laravel / PHP Experience with AWS / GCP Experience with GitLab CI/CD pipelines Experience with Terraform / Terragrunt Experience in digital forensics

Your benefits with us: Visit our benefits page. Apply online via our careers page — we will contact you quickly with feedback! A place where you can be yourself. We believe it is our responsibility to create an environment where everyone can feel welcome as they are. Diverse backgrounds and perspectives make us stronger and shape our culture. What we stand for internally, we also stand for as a brand: acceptance, inclusivity, and fairer fashion.

ABOUT YOU is one of Europe's fastest-growing E-commerce companies. With offices in Hamburg and Berlin, we combine fashion and technology. Our mission is to redefine online shopping and make it more personal. This requires more than just good ideas. It requires people who take initiative and challenge the status quo. We rely on flat hierarchies, direct communication, and pragmatic solutions. We don't have long approval processes. We work hard and at the same time value the opportunity to enjoy time together, whether it's a team lunch, after-work drinks, company events, or a quick coffee between meetings.