Senior SIEM/SOC Engineer

Role Overview

• Development of use cases and detection rules.
• Assisting in the conception and design of detection strategies.
• Collaboration with the SOC for use case validation and acceptance.
• Refinement and optimization of existing detection rules.
• Creating dashboards and reports for customers or the internal SOC.
• Contributing to internal knowledge sharing and process development.

Requirements

• 2–5 years of professional experience in SIEM/SOC, IT security, or threat detection.
• Familiarity with frameworks like MITRE ATT&CK, Cyber Kill Chain, and IOC-based detection.
• Knowledge of log data analysis, attack detection, SIEM, or security monitoring.
• Proficiency in at least one scripting, query, or programming language (e.g., Python, PowerShell, KQL, Lucene).
• Ideally, experience in developing detection use cases in Elastic SIEM, Palo Alto XSIAM, or comparable systems.
• Analytical thinking and problem-solving skills.
• Self-organization and a disciplined approach to documentation.
• Very good written and spoken English skills.

Tech Stack

• Python

Benefits

• Financial benefits
• Benefits with focus on learning and development
• Benefits with focus on health and sport
• Benefits with focus on family and work – life balance
• Other benefits