SENIOR SECURITY ENGINEER* SCHWERPUNKT SIEM & SOC, CP27 Zentrale
Core
Ensuring smooth operation of SIEM and SOC infrastructure, analyzing security events, and managing incident response.
Role type
Senior Security Engineer (SIEM & SOC)
Builds
SOC infrastructure, detection rules, dashboards, and incident response capabilities.
Domain
Cybersecurity, Security Operations Center (SOC), SIEM
Required skills
SIEM, SOAR, MITRE ATT&CK Framework, Incident Response, EDR/XDR, Log Analysis, Threat Detection, System Architecture, Automation, Vendor Management
Preferred skills
CISM, CISSP, CCSP, CEH, CHFI, CISA, CompTIA
Technologies
SIEM, SOAR, EDR, XDR, MITRE ATT&CK
Responsibilities
Ensure smooth operation of SIEM and SOC infrastructure; Continuously improve use cases, alerting logic, and system architecture; Develop and maintain decoders, parsing rules, and correlated alert signatures; Analyze and evaluate security events from various sources (EDR, Firewalls, Proxies, AD); Participate in detection, analysis, and containment of security incidents; Integrate and optimize data sources and interfaces to security systems; Fine-tune EDR/XDR solutions; Manage external service providers in Detection & Response; Collaborate with internal IT teams and business units.
Seniority
Senior, hands-on IC
