Senior SOC Analyst, Security Operations

Bitpanda is a Vienna-based financial platform founded in 2014 that has grown to serve over 7 million customers across Europe. The company offers a user-friendly investment platform where customers can trade cryptocurrencies, stocks, precious metals and commodities around the clock with any budget size. Bitpanda operates from multiple European hubs and is recognized as one of Europe's most secure investment platforms.

As a fintech and crypto platform handling millions of customer accounts and digital assets, Bitpanda faces sophisticated security threats and regulatory demands. The company is building a world-class security operations capability to detect threats, respond to incidents and embed security into its engineering practices. This Senior SOC Analyst role sits at the center of that effort, requiring someone who can drive both technical excellence and organizational change.

What you'll do

• Design and maintain a high-quality detection library in Elastic Security using ES|QL and KQL, mapping real-world attacker techniques to detections while continuously reducing false positives and improving coverage
• Lead investigations into complex security incidents, conduct proactive threat hunts across AWS, Elastic and Datadog environments, and refine response playbooks based on findings
• Build automated investigation, enrichment and response workflows using SOAR platforms, APIs and custom tools to reduce manual effort and increase consistency
• Strengthen cloud security monitoring and system hardening across Bitpanda's AWS infrastructure, work with engineering teams to eliminate risk, and support compliance with ISO 27001, PCI DSS and DORA standards
• Mentor security engineers, influence architectural security decisions, and foster security-first thinking across the organization
• Participate in a weekly rotating on-call schedule to provide 24/7 protection for customers

What you'll bring

• At least 4 years of hands-on security engineering experience with demonstrated expertise in incident response, threat hunting, SIEM platforms, digital forensics and scripting
• A track record of building and evolving security operations, not just maintaining them, including designing detections and automating workflows that deliver measurable improvements
• Strong experience securing cloud-native environments, particularly AWS, with solid expertise in system hardening, network security, IAM and security monitoring
• Comfort taking ownership of complex technical challenges and leading initiatives from conception through implementation
• Strong collaboration and communication skills with experience mentoring others and partnering with engineering teams

Nice to have

• Hands-on experience with Elastic Security, ES|QL and KQL
• Background in building SOAR integrations and security automation at scale

What they offer

• Hybrid work arrangement with 25 additional days per year to work from any city or country in your choice
• Competitive compensation aligned with impact, plus participation in stock options
• Mental health support through confidential coaching and counselling via OpenUP
• Three extra paid days off annually to rest and recharge after your first 6 months
• Unlimited access to Udemy for continuous learning and skill development
• Up to 8 weeks of gender-neutral parental leave
• Free onsite meals at Vienna, Bucharest, Barcelona and Berlin offices
• Global partner discounts and rewards across lifestyle, wellness, tech and travel
• Relocation support within the European Union to establish yourself in Vienna