Senior Security Engineer, Logging and SIEM Data Pipelines, Full-Time (f/m/d)

Your challenge

As part of a dedicated team, you will be responsible for designing the architecture, operating, and continuously improving the bank’s centralized logging and SIEM platforms to ensure high availability, performance, and scalability for enterprise-wide data volumes. Your responsibilities will include:

• Design, implementation, and maintenance of telemetry and data pipelines to enable the forwarding, enrichment, filtering, and delivery of security and operational log data while keeping costs under control
• Development and operation of SOAR workflows to accelerate incident response, automate recurring tasks, and improve the efficiency of security operations
• Development and maintenance of service monitoring, detection rules, reports, and dashboards that provide actionable security information to stakeholders across the organization
• Collaborate with security operations, IT infrastructure, and application teams to integrate new data sources, ensure data quality, and expand platform coverage—including early contributions to observability use cases
• Maintenance of technical documentation, including architectural descriptions, runbooks, data flow diagrams, and security parameters
• Coordinating the mitigation or resolution of security-related platform incidents with internal security stakeholders and external vendors
• Contribution to the Development of Architecture, Standards, and Best Practices for the Centralized Logging and Telemetry Ecosystem
• Provision of second- and third-level engineering support, including participation in an on-call rotation

Your profile

We are looking for someone with the following profile:

• A highly proactive, solution-oriented, and results-driven individual with strong abstract and conceptual thinking skills
• A willingness and curiosity to learn new technologies and approaches in a rapidly changing environment
• A university degree or advanced technical training (university of applied sciences, federal diploma) in computer science, information security, or a related field—or equivalent practical experience
• At least 5 years of practical experience in the engineering and administration of enterprise SIEM platforms, with experience in developing detection content, correlation rules, dashboards, and CIM-normalized data models
• Extensive experience in the design and operation of data pipelines and log-routing infrastructures, ideally using Cribl Stream or comparable telemetry pipeline tools
• Practical scripting and automation skills using one or more of the following: Python, Bash/Shell, JavaScript
• Work experience with Git, SQL, REST APIs, and regular expressions
• Solid understanding of SOAR platforms and security operations automation
• Experience with configuration management tools such as Ansible is a plus
• Fluent spoken and written English
• A good command of German is a major plus