SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Scalable Capital, a leading digital investment and banking platform with over one million clients and €50 billion in assets under management, is expanding its Security Operations Center (SOC) team. This role is designed for a technical security expert to lead advanced incident response and threat intelligence workflows.
You will drive the end-to-end lifecycle of security incidents from detection through containment and recovery. Key responsibilities include performing deep-dive host and network forensics to identify root causes and persistence mechanisms, designing and refining automated SOAR playbooks to increase response speed and consistency, and executing hypothesis-driven threat hunts across environments. You will analyze emerging threat trends and integrate external intelligence feeds into detection logic, serve as an escalation point for complex alerts, and mentor junior analysts on advanced investigative techniques. Additionally, you will generate detailed incident reports and present findings to both technical teams and executive stakeholders.
Scalable Capital is a fintech innovator founded in 2014, now employing over 700 people across Munich, Berlin, Vienna, Milan, and London. The company offers a full-service digital investment platform including Scalable Broker (stocks, ETFs, cryptocurrencies, derivatives), Scalable Wealth (digital wealth management), and the European Investor Exchange. The role offers competitive compensation, relocation support if needed, flexible work arrangements including the opportunity to work from abroad, professional development through in-house knowledge sharing and an education budget, German language classes, and benefits including a company pension scheme, 50% Deutschland Jobticket contribution, complimentary PRIME+ Broker subscription, and discounted sports activities.
Requirements:
- Extensive hands-on SOC or incident response experience, including Tier 2/Tier 3 responsibilities
- Proficiency with SIEM/SOAR platforms, EDR tools, and forensic toolsets
- Hands-on experience with AWS security controls and container security
- Strong understanding of network protocols, endpoint security, and common attack vectors
- Ability to use Python or similar scripting languages for security automation and data analysis
- Relevant certifications such as GCIH, GCFA, CISSP, or equivalent (preferred)
- Excellent analytical mindset, attention to detail, and ability to thrive under pressure
- Strong communication skills capable of translating technical findings to non-technical audiences
