Intermediate Security Engineer - Logging and SIEM Data Pipelines, 100% (f/m/d)

Tasks

• Architecture, operation, and continuous improvement of centralized logging and SIEM platforms to ensure high availability, performance, and scalability for enterprise-wide data volumes
• Design, implementation, and maintenance of telemetry and data pipelines to enable the routing, enrichment, filtering, and multi-destination delivery of log data while maintaining cost efficiency
• Development and implementation of SOAR workflows to accelerate incident response, automate recurring tasks, and improve the efficiency of security operations
• Development and maintenance of service monitoring, detection content, reports, and dashboards that provide actionable security information to stakeholders across the organization
• Collaborate with security operations, IT infrastructure, and application teams to integrate new data sources, ensure data quality, and expand platform coverage—including early contributions to observability use cases
• Maintenance of technical documentation, including architectural descriptions, runbooks, data flow diagrams, and security parameters
• Coordinating the mitigation or resolution of security-related platform incidents with internal security stakeholders and external suppliers
• Contribution to the development of architecture, standards, and best practices for the centralized logging and telemetry ecosystem
• Provision of second- and third-level engineering support, including participation in an on-call rotation

Requirements

• Work comfortably across multiple application, infrastructure, and business teams
• A willingness and curiosity to learn new technologies and approaches in a rapidly changing environment
• Highly proactive, solution-oriented, and results-driven, with strong abstract and conceptual thinking skills
• A structured and goal-oriented approach to work, with the ability to independently assess, prioritize, and resolve complex tasks and inquiries
• A creative problem-solver who challenges the status quo and proposes innovative solutions to existing problems
• Extensive experience in designing and operating data pipelines and log-routing infrastructure, ideally with Cribl Stream or similar telemetry pipeline tools
• Practical scripting and automation skills using one or more of the following: Python, Bash/Shell, JavaScript
• Work experience with Git, SQL, REST APIs, and regular expressions
• Solid understanding of SOAR platforms and security operations automation
• Experience with configuration management tools such as Ansible is a plus
• Fluent spoken and written English (B2/C1)

We offer