Senior SIEM/SOC Engineer (m/f/d)
Core
Developing use cases and detection rules, designing detection strategies, and creating dashboards for customers and the internal SOC.
Role type
Senior SIEM/SOC Engineer
Builds
Detection rules, use cases, dashboards, and reports
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Log data analysis, Attack detection, SIEM configuration, Scripting (Python, PowerShell, KQL, Lucene), MITRE ATT&CK framework knowledge, Cyber Kill Chain knowledge, IOC-based detection
Preferred skills
Elastic SIEM experience, Palo Alto XSIAM experience
Responsibilities
Develop use cases and detection rules, Assist in conception and design of detection strategies, Collaborate with SOC for use case validation, Refine and optimize existing detection rules, Create dashboards and reports, Contribute to internal knowledge sharing and process development