Staff Security Engineer, GSOC

Requirements

• 7+ years of broad cybersecurity experience with a deep understanding of core security fundamentals, coupled with 5+ years of dedicated experience in a SOC or Threat Detection Engineering environment
• Security Tool Mastery: Deep operational and architectural expertise with modern SIEM & SOAR platforms (specifically Google SecOps / Chronicle), EDR and Cloud infrastructure (AWS/GCP)
• Engineering Skills: Proven experience utilizing Git/GitHub, CI/CD pipelines, to deploy rules, manage infrastructure and automation as code
• CTI & Triage Workflows: Strong background in operationalizing Cyber Threat Intelligence and building scalable alert triage processes that reduce false positives and prevent alert fatigue
• Strategic Leadership: An exceptional communicator with the ability to influence cross-functional stakeholders (Regional Security Teams, Platform Engineering) and simplify complex systems across domains without requiring formal authority
• Advanced Threat Detection (Cloud, Identity & EDR): Proven deep operational experience triaging alerts and building high fidelity detections across public cloud environments (AWS/GCP), modern Identity Providers, and EDR platforms

Nice to Have

• Advanced Cyber Threat Intelligence: Experience building threat intel programs, managing intelligence platforms, and translating raw IOCs/TTPs into high-fidelity detection logic
• Regulated Environment Expertise: Deep operational understanding of global cybersecurity and privacy frameworks
• Relevant Technical Certifications: Active or in-progress industry-recognized technical certifications focused on security engineering, cloud architecture, or threat detection

What You'll Be Doing

• Detection & Platform Architecture: Architect, implement, strengthen and scale the Security Log Management (on AWS), SIEM and SOAR (Google SecOps) infrastructure
• Engineering-Led Detection & Automation: Architect, build, and maintain log ingestion pipelines, detection rules, API integrations, and SOAR workflows & Plugins
• Cyber Threat Intelligence: Establish and integrate CTI capabilities to drive an intelligence-led detection strategy
• Triage & Escalation Engineering: Design high-fidelity alert workflows
• Stakeholder Communication: Serve as the primary interface between the Global SOC and Engineering teams
• Mentorship & Leadership: Act as a hands-on technical leader and role model
• Metrics & Strategic Visibility: Maintain a Data-Driven Strategic mindset to define, track, and improve core operational metrics
• On-Call: Participate in an on-call rotation focused on maintaining critical SIEM/SOAR infrastructure health

Perks and Benefits

• Make the most of our hybrid working model and join the team for face-to-face connection and collaboration in our beautiful Berlin campus 2 days a week
• We offer 27 days holiday with an extra day on 2nd and 3rd year of service
• We will support you in developing yourself and your career growth opportunities: 1.000 € Educational Budget, Language Courses, Parental Support and access to the Udemy Business platform to explore a variety of online courses
• Get moving and release those wonderful, mind-boosting endorphins: Health Checkups, Meditation, Gym & Bicycle Subsidy
• Cash. Dough. Cheddar. Whatever you call it, we’ll help you with it: Employee Share Purchase Plan, Sabbatical Bank, Public Transportation Ticket Discount, Life & Accident Insurance, Corporate Pension Plan
• The power of getting together over some food is unrivaled. All the yum: Digital Meal Vouchers, Food Vouchers, Corporate Discounts