Specialist Security Operation Engineering (m/w/d)
Core
Responsible for technical operation and evolution of the central platform for Security Monitoring and Detection, developing and optimizing detection use cases to identify cyber threats early.
Role type
Senior Security Operations Engineer (Detection Engineering)
Builds
Central Security Monitoring and Detection platform
Domain
Cybersecurity, Threat Detection, SIEM/XDR
Deliverable
production ML models
Required skills
Security Monitoring, Detection Engineering, Security Analytics, SIEM/XDR/EDR/NDR platforms, MITRE ATT&CK, NIST CSF, Threat Intelligence, Log Architecture, Event Management, Windows/Linux/Network/Cloud/Identity analysis, Scripting (PowerShell/Python)
Preferred skills
None stated
Technologies
SIEM, XDR, EDR, NDR, MITRE ATT&CK, NIST CSF, Cyber Kill Chain, PowerShell, Python
Responsibilities
Operate and evolve central Security Monitoring and Detection platform; Develop, implement, and optimize detection use cases, correlation rules, and alerting mechanisms; Analyze attack techniques and threat actors to identify detection gaps; Integrate new systems, applications, cloud services, and infrastructures into the monitoring platform; Develop monitoring standards, detection playbooks, and operational procedures; Support security incidents with technical analysis and forensic data; Advise security analysts on technical matters.
Seniority
Senior, hands-on IC
