Intermediate Security Engineer - Logging and SIEM Data Pipelines, 100% (f/m/d)

Your challenge

As part of a dedicated team, you will be responsible for designing, operating, and continuously improving the bank’s centralized logging and SIEM platforms to ensure high availability, performance, and scalability for enterprise-wide data volumes. You will design, build, and maintain telemetry and data pipelines to enable the routing, enrichment, filtering, and multiple delivery of log data while maintaining cost efficiency. You will drive the development and operationalization of SOAR workflows to accelerate incident response, automate recurring tasks, and improve the efficiency of security operations. You will develop and maintain service monitoring, detection content, reports, and dashboards that provide relevant security insights to stakeholders across the organization. You will collaborate with security operations, IT infrastructure, and application teams to integrate new data sources, ensure data quality, and expand platform coverage—including early contributions to observability use cases. You will maintain technical documentation, including architecture descriptions, runbooks, data flow diagrams, and security parameters. You will coordinate the mitigation or resolution of security-related platform incidents with internal security stakeholders and external vendors. You will contribute to the development of architecture, standards, and best practices for the centralized logging and telemetry ecosystem. You will provide 2nd- and 3rd-level engineering support, including participation in an on-call rotation.

Your profile

You are accustomed to working across multiple application, infrastructure, and business teams. You have the willingness and curiosity to learn new technologies and approaches in a rapidly changing environment. You are highly proactive, solution-oriented, and results-driven, with strong abstract and conceptual thinking skills. You have a structured and goal-oriented approach to work, with the ability to independently assess, prioritize, and solve complex tasks and requests. You are a creative problem-solver who challenges the status quo and proposes innovative solutions to existing problems.

Requirements

• Extensive experience in designing and operating data pipelines and log-routing infrastructures, ideally using Cribl Stream or similar telemetry pipeline tools.
• Practical scripting and automation skills using one or more of the following: Python, Bash/Shell, JavaScript.
• Experience with Git, SQL, REST APIs, and regular expressions.
• A solid understanding of SOAR platforms and security operations automation.
• Experience with configuration management tools such as Ansible is a plus.
• Fluent spoken and written English (B2/C1).