Senior Security Engineer Logging SIEM Data Pipelines

À propos de cette offre

We're looking for a Senior Security Engineer to join an international banking environment in Zurich.

Senior Security Engineer Logging SIEM Data Pipelines

Job description:

• Start: ASAP
• Duration: Until 31/12/2026 (with possibility of internalisation)
• Workload: 100%
• Location: Zurich 

About the customer:

We're looking for a Senior Security Engineer to join an international banking environment in Zurich. In this role, you'll design and enhance enterprise logging and SIEM platforms, build security data pipelines, drive automation through SOAR, and help ensure reliable security monitoring across a complex global infrastructure.

Requirements:

• Design, operate and continuously improve enterprise SIEM and centralised logging platforms.
• Build and maintain telemetry and data pipelines for log routing, enrichment, filtering and delivery.
• Develop SOAR automations to improve incident response and operational efficiency.
• Create security detections, dashboards, reports and monitoring solutions.
• Integrate new data sources and ensure high-quality security telemetry across infrastructure and applications.
• Maintain technical documentation including architecture, runbooks and data flow diagrams.
• Support security incidents and provide 2nd and 3rd level engineering support, including on-call participation.
• Contribute to security architecture, standards and best practices for the logging and telemetry ecosystem. 

Competences:

• University degree in Computer Science, Information Security or a related field (or equivalent experience).
• At least 5 years' experience administering enterprise SIEM platforms.
• Strong experience building and managing logging, telemetry and data pipelines.
• Experience developing detection rules, correlation searches, dashboards and CIM-normalised data models.
• Hands-on experience with Cribl Stream or similar telemetry pipeline tools.
• Strong scripting skills using Python, Bash/Shell or JavaScript.
• Experience with Git, SQL, REST APIs and Regular Expressions.
• Good understanding of SOAR platforms and security automation.
• Experience with Ansible is an advantage.
• Fluent English is required. German is a strong plus.