Intermediate Security Engineer - Logging and SIEM Data Pipelines, 100% (f/m/d)

Your challenge

As part of a dedicated team, you will be responsible for designing the architecture, operating, and continuously improving the bank’s centralized logging and SIEM platforms to ensure high availability, performance, and scalability for enterprise-wide data volumes. Your responsibilities include:

• Design, implementation, and maintenance of telemetry and data pipelines to enable the forwarding, enrichment, filtering, and multiple delivery of security and operational log data while maintaining cost efficiency
• Support the development and implementation of SOAR workflows to accelerate incident response, automate recurring tasks, and improve the efficiency of security operations
• Development and maintenance of security monitoring, detection content, reports, and dashboards that provide actionable security intelligence to stakeholders across the organization
• Collaborate with security operations, IT infrastructure, and application teams to integrate new data sources, ensure data quality, and expand platform coverage—including early contributions to observability use cases
• Maintenance of technical documentation, including architectural descriptions, runbooks, data flow diagrams, and security parameters
• Coordinating the mitigation or resolution of security-related platform incidents with internal security stakeholders and external suppliers
• Contribute to the development of architecture, standards, and best practices for the centralized logging and telemetry ecosystem
• Provision of second- and third-level engineering support, including participation in an on-call rotation

Your profile

We are looking for candidates who:

• Feel comfortable working with multiple application, infrastructure, and business teams
• Are willing to learn new technologies and approaches in a rapidly changing environment
• Highly proactive, solution-oriented, and results-oriented, with strong abstract and conceptual thinking skills, are
• Have a structured and goal-oriented approach to work, with the ability to independently assess, prioritize, and resolve complex tasks and requests
• Creative problem-solving involves challenging the status quo and proposing innovative solutions to existing problems

Requirements

We are looking for candidates who:

• Extensive experience in the design and operation of data pipelines and log-routing infrastructures, ideally with Cribl Stream or comparable telemetry pipeline tools
• Practical scripting and automation skills using one or more of the following: Python, Bash/Shell, JavaScript
• Work experience with Git, SQL, REST APIs, and regular expressions
• Solid understanding of SOAR platforms and security operations automation
• Experience with configuration management tools such as Ansible is a plus
• Fluent spoken and written English (B2/C1)

We offer

Unfortunately, this job description does not contain any information about the offer.