SIEM/SOC Engineer (m/f/d)

Responsibilities

• Consult application and infrastructure teams in onboarding systems and applications into the SIEM/SOC environment
• Conduct threat modeling and simulation exercises to identify potential risks, attack vectors, and detection opportunities
• Review available log sources, assess data quality, and recommend additional log integrations to improve monitoring coverage
• Define, document, and prioritize security use cases aligned with business context, compliance requirements, and risk exposure
• Facilitate workshops and coordination meetings with both technical and non-technical stakeholders to ensure consistent understanding
• Provide expert guidance on log requirements, event normalization, and detection logic in accordance with SOC standards
• Ensure all onboarding activities are fully aligned with SOC workflows, escalation procedures, and organizational security policies
• Deliver comprehensive documentation, mapping, and actionable recommendations to support implementation by internal security and IT teams

Profile

• Proven experience in SIEM/SOC operations, particularly in log onboarding, correlation rule design, and use case development
• Solid understanding of threat modeling methodologies (e.g., MITRE ATT&CK, STRIDE) and their practical application
• Strong ability to analyze application and infrastructure architectures to identify relevant security events and monitoring requirements
• Proficiency with common log formats and sources (e.g., Windows Event Logs, Syslog, API logs, cloud telemetry)
• Understanding of event categorization, parsing, and detection strategies across hybrid environments (on-prem/cloud)
• Experience working with SIEM platforms such as QRadar, Splunk, Azure Sentinel, or Elastic is a strong advantage

Benefits

• A very renowned company
• You will work in an international environment