Intermediate Security Engineer: Logging and SIEM Data Pipelines, 100% (f/m/d)

YOUR CHALLENGE

• As part of a dedicated team, design, implement, and continuously improve the Bank’s centralized logging and SIEM platforms, ensuring high availability, performance, and scalability to meet enterprise-grade data demands
• Design, build, and maintain telemetry and data pipelines to enable real-time monitoring, filtering, and analysis solutions for security and operational alerts and events
• Drive the development and standardization of SIEM workflows to ensure accurate incident response, defensive analytics tools, and forensic analytics capabilities
• Develop and implement security monitoring and analytics solutions designed to provide security operations strategies to stakeholders throughout the organization
• Collaborate closely with security operations, IT departments, and stakeholders throughout the design process, identify and resolve data issues, and expand product usage while addressing early-stage vulnerabilities to identify root causes
• Coordinate operations and maintenance, including architectural standards for broader security pipelines and telemetry operations
• Contribute to the development of architectures, standards, and best practices for the centralized logging and telemetry ecosystem
• Provide first-level and rapid engineering support, including participation in an on-call rotation

YOUR PROFILE

• Collaborate across multiple applications, infrastructures, and business teams
• Willingness and ability to learn new technologies and approaches in a rapidly evolving technical landscape (e.g., vector databases and data tools) and to work effectively in multifunctional, cross-functional teams
• A proactive and goal-oriented approach to work, with the ability to methodically identify, assess, prioritize, and resolve complex tasks and challenges
• A creative problem solver who challenges the status quo and proposes innovative solutions to current trends
• Data engineer who designs and operates data pipelines and big data infrastructure, and works with Core Syslog or comparable forensic pipeline tools
• Extensive experience debugging and operating data pipelines and big data infrastructure, ideally with Core Syslog or comparable forensic pipeline tools
• Proactive scripting and automation skills using one or more of the following: Python, Bash/Shell, Ansible, or similar experience with Onb. SQL, REDP ATT, and logical correlation
• A thorough understanding of SIEM platforms and solutions
• Experience with configuration management tools such as Ansible is a plus
• Team-oriented and spoken English at the B2/C1 level