SIEM/SOC Experte / Detection Engineer (m/w/d)
Core
Develop and optimize detection use cases for real-world attack scenarios, analyze security incidents, and improve SIEM performance and data quality.
Role type
Detection Engineer (SIEM/SOC)
Builds
Detection rules, alerting logic, and incident analysis workflows for Elastic and Microsoft Sentinel
Domain
Cybersecurity, SIEM, SOC
Required skills
Log data analysis, Detection rule development, Incident analysis, SIEM configuration, Log parsing and normalization, Alert tuning, False positive reduction, SIEM performance optimization
Preferred skills
KQL, EQL, Lucene, Sigma, Microsoft Defender XDR, Azure, Sysmon, MITRE ATT&CK, Threat Intelligence
Technologies
Elastic, Microsoft Sentinel, Windows, Linux, Firewall, Proxy, EDR/XDR, Cloud, Network logs
Responsibilities
Integrate log sources into SIEM platforms, develop and test detection use cases, analyze security incidents, optimize data quality and alerting logic, reduce false positives, improve SIEM performance and cost efficiency, document technical changes, collaborate with internal teams and clients
Seniority
Junior to Senior