We are looking for Senior SIEM & Security Data Engineer to join our client in Zurich. In this role, you will play a key part in building a scalable, intelligent security data ecosystem- from advanced log pipelines to automation-driven incident response. Responsibilities
Design, operate, and continuously improve enterprise-grade SIEM and centralised logging systems, ensuring high availability, performance, and scalability. Build and maintain telemetry pipelines that handle routing, enrichment, filtering, and efficient multi‑destination log delivery. Develop and operationalise automation workflows to accelerate incident response and eliminate repetitive tasks (SOAR). Create and maintain detection content, dashboards, monitoring solutions, and reporting that empowers stakeholders across the organisation. Integrate new data sources, ensure high data quality, and contribute to early‑stage observability initiatives. Produce and maintain architecture documentation, runbooks, data flow diagrams, and security configurations. Coordinate resolution of platform‑related security incidents and provide advanced (L2/L3) engineering support, including on‑call participation. Requirements
5+ years building and operating enterprise SIEM platforms. Strong experience with detection engineering, correlation rules, dashboards, and CIM‑based data models. Hands‑on expertise in log pipeline design and telemetry routing (e.g. Cribl Stream or similar tools). Experience with: Git, SQL, REST APIs, Regex. Solid understanding of SOAR platforms and security automation.
#J-18808-Ljbffr
Design, operate, and continuously improve enterprise-grade SIEM and centralised logging systems, ensuring high availability, performance, and scalability. Build and maintain telemetry pipelines that handle routing, enrichment, filtering, and efficient multi‑destination log delivery. Develop and operationalise automation workflows to accelerate incident response and eliminate repetitive tasks (SOAR). Create and maintain detection content, dashboards, monitoring solutions, and reporting that empowers stakeholders across the organisation. Integrate new data sources, ensure high data quality, and contribute to early‑stage observability initiatives. Produce and maintain architecture documentation, runbooks, data flow diagrams, and security configurations. Coordinate resolution of platform‑related security incidents and provide advanced (L2/L3) engineering support, including on‑call participation. Requirements
5+ years building and operating enterprise SIEM platforms. Strong experience with detection engineering, correlation rules, dashboards, and CIM‑based data models. Hands‑on expertise in log pipeline design and telemetry routing (e.g. Cribl Stream or similar tools). Experience with: Git, SQL, REST APIs, Regex. Solid understanding of SOAR platforms and security automation.
#J-18808-Ljbffr
