CareerPlan

Lead Information Security SIEM Engineer

Bucharest, RORemoteFull-time2026-11-05 → 2026-11-10
Hybrid

Core

Design, implement, and optimize a Security Information and Event Management (SIEM) platform for threat detection and log aggregation across IT, Operational Technology (OT), and R&D environments.

Role type

Lead Information Security SIEM Engineer

Builds

SIEM solutions, automated incident response workflows, and security analytics capabilities

Domain

Semiconductor industry, Cybersecurity, OT/ICS security

Deliverable

production ML models

Required skills

SIEM platform expertise (CrowdStrike NGSIEM, Splunk, Sentinel), scripting for automation, SOC processes, ICS/SCADA security, NIST CSF/IEC 62443 frameworks, cloud security (AWS/Azure/GCP), team leadership

Preferred skills

Threat intelligence integration, SOAR/EDR/NDR experience, Zero Trust principles, embedded systems security

Technologies

CrowdStrike NGSIEM, Splunk, Sentinel, SOAR, EDR, NDR, AWS, Azure, GCP

Responsibilities

Drive continuous improvement of SIEM use cases and correlation rules; Integrate SIEM with complementary security tools; Implement data retention strategies; Collaborate with regional engineering teams on OT security strategy; Lead a team of cybersecurity professionals

Seniority

Senior, hands-on IC with leadership responsibilities