[Hiring] Detection Engineer @S-PRO

Role Description

We are looking for an experienced SIEM/SOAR and detection engineering freelancer to help further develop our existing SIEM setup.

• Review and critical evaluation of the existing Sekoia/SIEM setup
• Analysis of connected data sources and identification and resolution of relevant gaps
• Analysis of existing detection rules, use cases, and cases
• Establishment of a baseline for case volume, processing effort, and false positive rate at the start of the project
• Identification of causes for high manual analysis effort
• Improvement of detection logic, prioritization, and case quality
• Design and implementation of additional data enrichment
• Identification and implementation of meaningful integrations
• Development or further development

Qualifications

• Substantial hands-on experience with SIEM and detection engineering
• Experience with SOC processes and incident triage
• Experience with SOAR and security automation
• Strong knowledge of various security data sources and integrations, particularly identity, cloud (AWS), and SaaS
• Detection engineering based on MITRE ATT&CK
• Experience with versioned, traceable maintenance of detections (Detection-as-Code is a plus)
• Experience with Sekoia
• Hands-on mindset and ability to work independently
• Ability to critically analyze existing setups and implement pragmatic improvements
• Willingness and ability to actively share knowledge
• Fluent in German

Benefits

• Flexible schedule
• Remote work model
• Medical insurance
• Paid vacations
• Paid Sick-leaves
• Paid State holidays