SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Bitpanda is a Vienna-based fintech platform founded in 2014 that simplifies wealth creation by enabling users to invest in cryptocurrencies, crypto indices, stocks, precious metals and commodities. With 7+ million customers across Europe, Bitpanda is one of Europe's safest and most secure investment platforms.
As a Senior SOC Analyst, you will play a critical role in protecting millions of customers' money, identities and digital assets by building security capabilities that detect attacks, respond to incidents and strengthen Bitpanda's security posture.
Key responsibilities:
**Detection Engineering**: Own the strategy and quality of the detection library in Elastic Security (ES|QL/KQL), designing high-fidelity detections mapped to real-world attacker techniques while continuously improving coverage, reducing noise and raising SOC maturity.
**Incident Response & Threat Hunting**: Lead investigations into complex security incidents, proactively hunt for advanced threats across AWS, Elastic and Datadog, refine response playbooks, and turn every incident into lasting improvements to security capabilities.
**Security Automation**: Design and implement automated investigation, enrichment and response workflows using SOAR, APIs and custom tooling to reduce manual effort while increasing speed, consistency and resilience across security operations.
**Cloud Security & Compliance**: Improve cloud security monitoring, system hardening and security tooling across AWS, partner with engineering teams to proactively eliminate risk, and support compliance initiatives including ISO 27001, PCI DSS and DORA.
**Technical Leadership**: Act as a technical leader within the Security team, mentor engineers, influence architectural decisions, champion security best practices and help build a security-first culture across Bitpanda.
**On-Call Support**: Participate in a weekly rotating on-call schedule to keep millions of users safe 24/7.
The role offers hybrid flexibility with 25 additional days per year to work from a city or country of your choice, competitive total compensation aligned with pay-for-impact policy including stock options, mental health support through OpenUP, unlimited Udemy access, relocation benefits within the EU, free onsite dining in Vienna, and additional parental leave.
**Requirements:**
- 4+ years of hands-on security engineering experience with deep expertise in incident response, threat hunting, SIEM, digital forensics and scripting
- Proven experience building and evolving security operations (not just operating them), including designing detections, automating workflows and improving security processes with measurable outcomes
- Strong experience securing cloud-native environments, particularly AWS, with expertise in system hardening, network security, IAM and security monitoring
- Highly desirable: experience with Elastic Security, ES|QL and KQL
- Ability to take ownership of complex technical challenges, balancing pragmatism with security excellence
- Excellent collaboration and communication skills with experience mentoring others and influencing technical direction
