SOC Automation Analyst - SOAR & Incident

Make a difference in the financial life of millions of people: At Erste Digital you are co-creating the digital future, in which better financial health is possible. #believeinyourself

We are part of Erste Group – the largest banking group in Central and Eastern Europe with more than 2,500 branches and over 45,000 employees. Our more than 2,000 IT experts and enthusiasts are the bank's Digital Muscle.

Help us automate the work that should not require an analyst

Our Cyber Defense Center protects the digital services used by millions of customers across Erste Group.

We are looking for a SOC Automation Analyst who combines security operations experience with an engineering mindset. You will work with real security incidents - but also look beyond the individual alert and ask: How can we detect this earlier, enrich it faster and respond more consistently next time?

Your mission is to turn repeatable SOC activities into reliable automation, allowing our analysts to focus on where human judgment makes the difference.

What to do:

• Identify investigation and response activities suitable for automation

• Design, build and maintain SOAR playbooks for enrichment, triage, notification, containment and remediation

• Integrate security and IT platforms through APIs, webhooks and connectors

• Develop automation using Python, PowerShell or comparable technologies

• Build reliable workflows with appropriate approval points, error handling, logging, permissions and monitoring

• Analyze incidents and identify opportunities to improve playbooks, automations and response procedures

• Collaborate with SOC analysts, security engineers, threat intelligence specialists and service owners across our international organization