Security Analyst, Incident Response

Security Analyst - Incident Response (all genders)

Location: Hamburg, HH, de

Company Description

ABOUT YOU is one of Europe’s fastest growing e-commerce companies. Based in Hamburg and Berlin, we operate at the intersection of fashion and technology. Our mission is to rethink online shopping and make it personal and seamless. This takes more than good ideas. It takes people who take initiative and challenge the status quo. We believe in flat hierarchies, direct communication, and pragmatic decisions. No long approval chains. Just ownership, trust, and clear responsibility. We work hard, but we also believe in enjoying the ride together - over team lunches, afterwork drinks, company events, or a quick coffee in between meetings. If this sounds like you, ABOUT YOU could be the right place to bring in your perspective.

Job Description

• Deployed, configured, and maintained DFIR tools and infrastructure to preserve incident readiness
• Served as the first responder for security incidents, driving digital forensics investigations and post-incident risk mitigation
• Maintained, optimized, and fine-tuned SIEM platforms to maintain reliable high-fidelity detection capabilities
• Enhanced monitoring and scanning systems using Python to automate routine security workflows and identify vulnerabilities
• Integrated AI technologies into security operations to optimize detection, triage, and threat hunting.
• Investigated, analyzed, and remediated security alerts across internal systems and cloud environments
• Created and updated incident response playbooks to standardize workflows and shorten response times
• Tracked emerging cyber threats and zero-day vulnerabilities to implement proactive security controls

Qualifications

• Proven background in IT security (2–4 years of hands-on experience in incident response, security operations (SOC), or digital forensics)
• Hands-on experience with incident response, blue teaming, or digital forensics with exposure to cloud environments (AWS/Azure/GCP)
• Practical experience using and configuring SIEM tools (e.g., investigating alerts, querying logs)
• Strong team player with comfortable cross-functional technical communication skills
• Ability to write scripts to automate daily tasks in Python (or a similar scripting language)
• Familiarity with using modern AI-assisted tools to streamline analysis or automation tasks (not using AI as a chatbot, but doing agentic work)
• Solid command of Linux operating system fundamentals and command-line usage
• Basic experience managing or configuring web application firewalls (WAF), preferably Cloudflare
• Good communication skills with the ability to convey technical findings clearly to both technical peers and non-technical stakeholders