Intermediate Security Engineer - Logging and SIEM Data Pipelines, 100% (f/m/d)

Tasks

• Be part of a portfolio of host, workforce, and system components and continuously improve the bank's automated logging and monitoring, using best-in-class security processes to understand and anticipate threats
• Work with and maintain telemetry and data pipelines, including matching, deduplication, filtering, and enrichment
• Work independently to develop data engineering features and deploy different versions of deployments
• Drive the development and centralization of SIEM workflows to enable faster responses, reduce deployment errors, and generate more reliable security alerts
• Monitor and/or create code monitoring systems, and implement automation and code reviews based on case studies
• Take responsibility for initiatives such as improving safety automation during expansion
• Collaborate with the security architecture, IT governance, and security engineering teams (network-based SIEM security, source code audit reviews, and an expanded platform program—including early contributions to information risk tools)
• Develop and proactively automate monitoring dashboards, workflows, data flow diagrams, and cybersecurity automation
• Collaborate on the migration of security telemetry pipelines to multi-tenant security monitoring and cloud-native services
• Contribute to the development of architecture, standards, and best practices for centralized logging and telemetry processes
• Provide first- and second-level engineering support, including participation in an on-call rotation

Requirements

• A seamless experience when working across multiple applications, infrastructure, and compliance teams
• Experience with log management, architecture, and scripting in Bash
• Extensive experience in designing and implementing data pipelines and log-routing infrastructure, ideally using Obs (Linux = open-source pipeline tools with a low level of maturity)
• Professional scripting and automation skills using PowerShell, Bash, or JavaScript
• Extensive experience with SIEMs, SQL, REST APIs, and log4j, as well as experience with integrations and connections to SIEM-based applications and workloads
• Experience with configuration management tools such as Ansible or Securebase
• Familiar with modern English ShellF