Design, operate and continuously improve enterprise SIEM and centralised logging platforms.
Build and maintain telemetry and data pipelines for log routing, enrichment, filtering and delivery.
Develop SOAR automations to improve incident response and operational efficiency.
Create security detections, dashboards, reports and monitoring solutions.
Integrate new data sources and ensure high-quality security telemetry across infrastructure and applications.
Maintain technical documentation including architecture, runbooks and data flow diagrams.
Support security incidents and provide 2nd and 3rd level engineering support, including on-call participation.
Contribute to security architecture, standards and best practices for the logging and telemetry ecosystem.

University degree in Computer Science, Information Security or a related field (or equivalent experience).
At least 5 years' experience administering enterprise SIEM platforms.
Strong experience building and managing logging, telemetry and data pipelines.
Experience developing detection rules, correlation searches, dashboards and CIM-normalised data models.
Hands-on experience with Cribl Stream or similar telemetry pipeline tools.
Strong scripting skills using Python, Bash/Shell or JavaScript.
Experience with Git, SQL, REST APIs and Regular Expressions.
Good understanding of SOAR platforms and security automation.
Experience with Ansible is an advantage.
Fluent English is required. German is a strong plus.

Senior Security Engineer Logging SIEM Data Pipelines

Über den Job