Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
JobTailor Logo

See all jobs on JobTailor

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Interval Group

Security Operations Engineer

Interval Group

Security Operations Engineer designing and implementing SecOps tools for a large energy sector project. Role involves developing detection capabilities and supporting incident response activities.

Posted 5/23/2026contractRemote • 🇩🇪 GermanyMid-LevelSeniorWebsite

Tech Stack

Tools & technologies
CloudGoKubernetesPython

About the role

Key responsibilities & impact
  • Design and build SecOps tools, including SIEM, SOAR, vulnerability detection and management, EDR, logging pipelines, and user behavior analytics
  • Develop architecture patterns and solution designs for the security tool ecosystem
  • Evaluate and integrate new tools and platforms to improve detection, response, and automation capabilities
  • Build and maintain scalable data ingestion, correlation, and alerting workflows for advanced detection and response
  • Coordinate with operations engineers to jointly maintain SecOps workflows and ensure platform reliability
  • Develop automation scripts, playbooks, and workflows in SOAR tools to improve response efficiency and reduce analyst workload
  • Design and build an internal SecOps product to deliver detection and response capabilities for vulnerabilities, threats, and security incidents
  • Integrate with the internal observability product and broader corporate SOC functions
  • Provide technical leadership during incidents, including tool behavior, data quality, and technical issues
  • Develop, test, and operationalize detection capabilities based on evolving threats and platform telemetry
  • Create and maintain detection-as-code artifacts such as Sigma rules, YARA, KQL queries, and static analysis rules
  • Validate detection quality through adversary simulation, purple teaming, or continuous tuning

Requirements

What you’ll need
  • 5+ years of experience in security operations, engineering, and cloud security tooling
  • Engineering experience with SIEM/SOAR, EDR platforms, logging, telemetry pipelines, scripting (Python, PowerShell, Go), and cloud-native security tools
  • Experience with infrastructure-as-code, CI/CD toolchains, and container orchestration (Kubernetes)
  • Experience with threat modeling, detection engineering frameworks, TTP matrices, and MITRE ATT&CK
  • Experience producing architecture artifacts, interface specifications, and onboarding guidelines
  • Experience with logging and detection solutions for cloud architectures
  • Fluent English, spoken and written (minimum C1)

Benefits

Comp & perks
  • Flexible working hours
  • Freedom to choose your own projects
  • Access to exciting projects across different industries
  • Support for professional development
  • Competitive compensation
  • Dedicated team

ATS Keywords

✓ Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools
SIEMSOARvulnerability detectionEDRscriptingPythonPowerShellGoinfrastructure-as-codeKubernetes
Soft Skills
technical leadershipcommunicationcollaborationproblem-solvinganalytical thinking