Senior SIEM/SOC Engineer (m/f/d)
Core
Designing detection strategies, developing use cases and rules, and creating dashboards for threat detection within a SIEM/SOC environment.
Role type
Senior SIEM/SOC Engineer
Builds
Detection rules, use cases, and security dashboards
Domain
Cybersecurity / Threat Detection
Deliverable
production ML models | product features | dashboards & analysis
Required skills
SIEM/SOC experience, log data analysis, attack detection frameworks (MITRE ATT&CK, Cyber Kill Chain), scripting/querying (Python, PowerShell, KQL, Lucene), analytical thinking
Preferred skills
Elastic SIEM, Palo Alto XSIAM experience
Technologies
Elastic SIEM, Palo Alto XSIAM, Python, PowerShell, KQL, Lucene
Responsibilities
Develop use cases and detection rules, assist in designing detection strategies, collaborate with SOC for validation, refine existing rules, create dashboards and reports, contribute to knowledge sharing and process development
Seniority
Mid-Senior (2–5 years experience), hands-on IC