Senior Security Engineer Logging SIEM Data Pipelines (r-18979)

Tasks and responsibilities:

Your primary responsibilities will involve designing, operating, and evolving our client's centralised logging and SIEM platforms, building and maintaining data pipelines for intelligent log routing and enrichment, driving SOAR automation, and contributing to the expansion of their security data ecosystem — including early-stage observability use cases. You will work closely with security operations, infrastructure, and application teams to ensure reliable, high-quality data flows from source to insight

• .

As part of a dedicated team, architect, operate, and continuously improve the centralised logging and SIEM platforms, ensuring high availability, performance, and scalability for enterprise-grade data volum

• esDesign, build, and maintain telemetry and data pipelines, enabling routing, enrichment, filtering, and multi-destination delivery of security and operational log data while maintaining cost-efficien
• cyDrive the development and operationalisation of SOAR workflows to accelerate incident response, automate repetitive tasks, and improve security operations efficien
• cyDevelop and maintain service monitoring, detection content, reports, and dashboards that provide actionable security intelligence to stakeholders across the organisati
• onCollaborate with security operations, IT infrastructure, and application teams to integrate new data sources, ensure data quality, and expand platform coverage — including early-stage contributions to observability use cas
• esMaintain technical documentation including architecture descriptions, runbooks, data flow diagrams, and security parameterisatio
• nsCoordinate the mitigation or resolution of security-relevant platform incidents with internal security stakeholders and external vendo
• rsContribute to the development of architecture, standards, and best practices for the centralised logging and telemetry ecosyst
• emProvide 2nd and 3rd level engineering support, including participation in an on-call rotati

**on

Must-have criter**

• ia:

Minimum 5 years of hands-on experience engineering and administering enterprise SIEM platforms, with experience developing detection content, correlation searches, dashboards, and CIM-normalised data mo

• delsStrong experience designing and operating data pipelines and log routing infrastructure, ideally with Cribl Stream or comparable telemetry pipeline t
• oolsPractical scripting and automation skills with one or more of: Python, Bash/Shell, JavaSc
• riptWorking experience with GIT, SQL, REST APIs, and regular express
• ionsSolid understanding of SOAR platforms and security operations automa
• tionExperience with configuration management tools such as Ansible is an advan
• tageFluent written and spoken Eng
• lishGood knowledge of German is a strong

plus

Contract dur

ationUntil 31.12.2026 with possible extension and/or internalis

ation