SIEM/SOC Engineer (m/f/d)

IT is and always has been our core business that laid the foundation for Hays' success. We are the biggest privately owned IT recruitment agency in Germany and offer the best jobs for every career level – whether you are interested in vacancies in agile SMEs or international DAX groups. Hays masters the entire IT job spectrum, from support to software architecture or digitalisation – thanks to our broad portfolio, we have something for everyone. In the last decades, we were able to support numerous IT experts with choosing the right path for a successful career, positioning ourselves as their lifelong partner. Our highly specialised consultants can cater to your every wish and expectation and will prepare you for interviews and contract negotiations. Give it a try and learn what the market has to offer – our services are free of charge, non-binding and discreet! We look forward to hearing from you.

• Consult application and infrastructure teams in onboarding systems and applications into the SIEM/SOC environment
• Conduct threat modeling and simulation exercises to identify potential risks, attack vectors, and detection opportunities
• Review available log sources, assess data quality, and recommend additional log integrations to improve monitoring coverage
• Define, document, and prioritize security use cases aligned with business context, compliance requirements, and risk exposure
• Facilitate workshops and coordination meetings with both technical and non-technical stakeholders to ensure consistent understanding
• Provide expert guidance on log requirements, event normalization, and detection logic in accordance with SOC standards
• Ensure all onboarding activities are fully aligned with SOC workflows, escalation procedures, and organizational security policies
• Deliver comprehensive documentation, mapping, and actionable recommendations to support implementation by internal security and IT teams

• Proven experience in SIEM/SOC operations, particularly in log onboarding, correlation rule design, and use case development
• Solid understanding of threat modeling methodologies (e.g., MITRE ATT&CK, STRIDE) and their practical application
• Strong ability to analyze application and infrastructure architectures to identify relevant security events and monitoring requirements
• Proficiency with common log formats and sources (e.g., Windows Event Logs, Syslog, API logs, cloud telemetry)
• Understanding of event categorization, parsing, and detection strategies across hybrid environments (on-prem/cloud)
• Experience working with SIEM platforms such as QRadar, Splunk, Azure Sentinel, or Elastic is a strong advantage

• A very renowned company
• You will work in an international environment

Ihr Kontakt

Referenznummer
892067/1

Kontakt aufnehmen
Telefon:+43 1 5353443 0
E-Mail: positionen@hays.at

Anstellungsart
Freiberuflich für ein Projekt