IT Security Operations Engineer (m/w/d)
Core
Connecting log sources to ELK and Splunk, normalizing logs, creating threat detections, and developing playbooks for security analysts.
Role type
IT Security Operations Engineer (SIEM/Log Management)
Builds
SIEM detections, playbooks, dashboards, and log data models
Domain
Cybersecurity / IT Operations
Required skills
ELK Stack, Splunk Enterprise Security, Kubernetes/OpenShift, CI/CD pipelines, Python/Scripting, Infrastructure as Code, Ansible, Threat Analysis
Preferred skills
Offensive Security, Vulnerability Analysis, Web Application Security, Network Security
Technologies
ELK, Splunk, OpenShift, Kubernetes, Ansible, CI/CD
Responsibilities
Integrate log sources into SIEM, create threat detections, develop security playbooks, build dashboards for alert management, conduct threat analysis, present to stakeholders
Seniority
Mid-Senior, hands-on IC