Security Operations

• Take responsibility for the administration, operation and continuous development of our SOC tool landscape.
• Focus in particular on endpoint protection platforms (EPP) and our SIEM.
• Connect, integrate and provide technical support for new log sources and security tools.
• Ensure the availability, performance and data quality of the SOC systems in use.
• Analyze, isolate and resolve incidents in the SOC infrastructure.
• Document configurations, processes and operational procedures in a clear and traceable manner.
• Work closely with other teams and actively contribute to services and security topics as part of our ongoing organizational development.

Security Operations Engineer – SOC

• Design and build SecOps tools, including SIEM, SOAR, vulnerability detection and management, EDR, logging pipelines, and user behavior analytics
• Develop architecture patterns and solution designs for the security tool ecosystem
• Evaluate and integrate new tools and platforms to improve detection, response, and automation capabilities
• Build and maintain scalable data ingestion, correlation, and alerting workflows for advanced detection and response
• Coordinate with operations engineers to jointly maintain SecOps workflows and ensure platform reliability
• Develop automation scripts, playbooks, and workflows in SOAR tools to improve response efficiency and reduce analyst workload
• Design and build an internal SecOps product to deliver detection and response capabilities for vulnerabilities, threats, and security incidents
• Integrate with the internal observability product and broader corporate SOC functions
• Provide technical leadership during incidents, including tool behavior, data quality, and technical issues
• Develop, test, and operationalize detection capabilities based on evolving threats and platform telemetry
• Create and maintain detection-as-code artifacts such as Sigma rules, YARA, KQL queries, and static analysis rules
• Validate detection quality through adversary simulation, purple teaming, or continuous tuning

See all jobs on JobTailor

Security Operations Engineer – SOC

Security Operations Engineer