Job description
S-PRO is a software development and IT consulting partner. We develop unique products tailored to the client’s needs to accelerate business. Our typical engagement is consultancy, discovery, build, and maintenance, with clients from fintech, healthcare, energy and other industries.
We are looking for an experienced SIEM/SOAR and detection engineering freelancer to help further develop our existing SIEM setup.
Job requirements
Responsibilities:
Review and critical evaluation of the existing Sekoia/SIEM setup
Analysis of connected data sources and identification and resolution of relevant gaps
Analysis of existing detection rules, use cases, and cases
Establishment of a baseline for case volume, processing effort, and false positive rate at the start of the project
Identification of causes for high manual analysis effort
Improvement of detection logic, prioritization, and case quality
Design and implementation of additional data enrichment
Identification and implementation of meaningful integrations
Development or further development
Requirements:
Substantial hands-on experience with SIEM and detection engineering
Experience with SOC processes and incident triage
Experience with SOAR and security automation
Strong knowledge of various security data sources and integrations, particularly identity, cloud (AWS), and SaaS
Detection engineering based on MITRE ATT&CK
Experience with versioned, traceable maintenance of detections (Detection-as-Code is a plus)
Experience with Sekoia
Hands-on mindset and ability to work independently
Ability to critically analyze existing setups and implement pragmatic improvements
Willingness and ability to actively share knowledge
Fluent in German.
What we offer:
Long team focus: we create an environment of transparent communication, and minimal bureaucracy, which leads to long-term relationships.
Development of niche expertise: we are working in several niches, such as FinTech, healthcare, and logistics. Therefore, our employees can develop their own expertise in these domains.
Continuous learning: we create employee development plans / personal roadmaps /quick promotion processes.
Internal career development: 80% of our current executives were promoted to those positions within S-PRO. We encourage initiative. If a person wants to set new challenges and grow, we will definitely support them.
Benefits and perks:
Flexible schedule.
Remote work model.
Medical insurance
Paid vacations
Paid Sick-leaves.
Paid State holidays.
By submitting your application for this position, you consent to the processing of your personal data for recruitment purposes in accordance with applicable data protection laws. Detailed information regarding the processing of personal data can be found at the following link: Сandidate Privacy
Substantial hands-on experience with SIEM and detection engineering, SOC processes, SOAR, security data sources, MITRE ATT&CK, Sekoia, and fluent German.
Key Responsibilities
- reviewing SIEM setup
- improving detection logic
- implementing integrations
Skills & Tools
SIEM, SOAR, Sekoia, AWS, MITRE ATT&CK
Job Details
- Category: Information Technology
- Seniority: Senior Level
- Commitment: Full Time, Contract
- Workplace: Remote — Germany or Poland
- Languages: German, English
Benefits
- Generous paid time off
About S-PRO
A software development and IT consulting partner that builds tailored products to accelerate business. — Industry: Information Technology