Security Analyst (SOC Tier 1) (f/m/d) @ A1 Competence Delivery Center

Strength. Care. Growth

A1 Competence Delivery Center is a vital component of A1’s telecommunications business. Acting as an expertise hub, CDC is dedicated to delivering a full range of high-quality IT, network, financial and other services to support A1’s operations across all OpCos, independent of location.

Using the power of being OneGroup and leveraging synergies, CDC enables transparency of resources, key skills and knowledge expansion and personal career growth opportunities’ enhancement, paired with job stability.

You will know we are the right place for you, if you are driven by:

• Opportunities to learn and build your career.
• Meaningful work in a stable and fast-paced company.
• Diversity of people, projects, and platforms.
• A supportive, fun, and inspiring place to work.

Role Overview:

You will be responsible for continuously monitoring and analyzing the organization’s security posture. The role focuses on identifying, investigating, and helping to mitigate risks and vulnerabilities to ensure the protection of data, infrastructure, and systems.

Role insights:

• Monitoring security events and alerts in real time to identify malicious activity and anomalies.
• Conducting initial investigation and analysis of detected security incidents by following documented procedures and playbooks.
• Classify and prioritize security alarms based on severity and context.
• Document investigation actions, findings, and decisions in the case management system.
• Escalate security incidents to Tier 2 analysts for deeper investigation and response where required.
• Supporting Tier 2 analysts during in-depth investigations by collecting relevant logs, documenting early observations, and escalating contextual details.
• Assist with daily operational tasks, including basic forensic triage and threat intelligence reviews, under supervision.
• Identify and propose improvements to SOC workflows and processes to enhance operational effectiveness.
• Operate within a 24/7 shift model, working 12-hour shifts (day and night rotations).

What makes you unique:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent relevant experience.
• Experience working with SIEM platforms such as Splunk and Microsoft Sentinel, and Microsoft Defender for Endpoint.
• Basic understanding of incident response, threat detection, and alert lifecycle management.
• Familiarity with security concepts such as IDS/IPS, endpoint protection, and MITRE ATT&CK.
• Certifications such as CompTIA Security+, SC-200, SC-900, Splunk Core Certified User, or similar are a strong advantage.
• Strong analytical mindset, attention to detail, and a willingness to learn and grow within the SOC environment.
• Effective written and verbal communication skills.
• Ability to communicate in German is considered a plus.

Our gratitude for the job done will be eternal, but we’ll also offer you:

•  Valuable experience in one of the fastest-growing and most innovative industries.
•  Challenging assignments with strong opportunities for personal and professional growth in a multinational environment.
•  Hybrid working model supporting a healthy work-life balance.
•  Thousands of online and in-person Learning opportunities for you to grow.
•  Modern, open, and friendly work environment that fosters continuous learning and the development of both technical and soft skills.
•  Special employee tariffs and a wide range of attractive employee benefits.

If you have any questions,  please do not hesitate to contact Svetlina Vazharova.