Senior Cybersecurity Platforms & Automation Engineer (m/w/d) mit Schwerpunkt Elastic
Core
Design, build, and operate scalable Elastic Security platforms and automation solutions for healthcare cybersecurity, enabling AI-driven defense and intelligent security operations.
Role type
Senior IC Security Platform Architect & Automation Engineer
Builds
High-availability Elastic Security platforms, OpenSearch clusters, Kubernetes environments, and automated security pipelines
Domain
Healthcare IT / Cybersecurity / SIEM & Security Analytics
Deliverable
production ML models | product features | infrastructure
Required skills
Elastic Stack / Elastic Security, Log data integration & normalization, Detection Engineering, MITRE ATT&CK frameworks, Linux, Container orchestration (Kubernetes), Python scripting, Ansible, CI/CD pipelines
Preferred skills
Experience with SIEM platforms beyond Elastic, Cloud security integration, Advanced threat modeling
Technologies
Elastic Security, OpenSearch, Kubernetes, Ansible, Python, Linux
Responsibilities
Plan, implement, and operate high-availability security platforms; Develop automation strategies for infrastructure and security operations; Integrate and normalize log data from diverse IT and security sources; Create and optimize detection rules to improve threat coverage and reduce false positives; Collaborate with SOC, consulting, and development teams; Troubleshoot technical issues to ensure system reliability
