<div class="show-more-less-html__markup show-more-less-html__markup--clamp-after-5 relative overflow-hidden"> <br/><p><strong>About the Company</strong></p><p><br/></p><p><br/></p><p>My client is modernizing its software development and delivery to address critical challenges in the energy sector. The Engineering Delivery Platform (EDP) is a cloud-native, hybrid platform designed to accelerate software product development by providing self-service capabilities for infrastructure, data, lifecycle management, and operations.</p><p><br/></p><p><br/></p><p><strong>About the Role</strong></p><p><br/></p><p><br/></p><p>Mission</p><p><br/></p><p><br/></p><ul><li><strong>1- SecOps Tooling</strong></li><li>Engineering Design, build, and integrate security tools (SIEM, SOAR, EDR, vulnerability management, logging pipelines, UBA).</li><li>Develop scalable data ingestion, correlation, and alerting workflows.</li><li>Automate repetitive tasks (SOAR playbooks, scripts) to improve SOC efficiency.</li><li>Coordinate with engineering teams to maintain SecOps workflows and platform reliability.</li><li>Build an internal SecOps product for threat/vulnerability detection, integrating with observability and corporate SOC.</li><li></li><li><strong>2- Incident Response (IR) Support</strong></li><li>Provide technical leadership during incidents (tooling behavior, data quality, engineering fixes).</li><li>Enhance detection content (rules, dashboards, data models) based on incident patterns.</li><li>Enable rapid IR instrumentation (log onboarding, custom tooling).</li><li></li><li><strong>3- Detection Engineering</strong></li><li>Develop, test, and operationalize detection rules (Sigma, YARA, KQL) for evolving threats.</li><li>Validate detections via adversary simulation, purple-teaming, or tuning.</li><li>Maintain detection-as-code artifacts with version control and documentation.</li></ul><p><br/></p><p><br/></p><p><br/></p><p><strong>Responsibilities</strong></p><p><br/></p><p><br/></p><ul><li>5+ years in security operations, engineering, or cloud security.</li></ul><p><br/></p><p><br/></p><p><strong>Qualifications</strong></p><p><br/></p><p><br/></p><ul><li>Must-have:</li><li></li><li>SIEM/SOAR, EDR, log ingestion, scripting (Python/PowerShell/Go), cloud-native security.</li><li>IaC, CI/CD, Kubernetes.</li><li>Threat modeling, MITRE ATT&amp;CK, detection engineering.</li><li>Cloud logging/detection (GCP/AWS/Azure).</li><li>Fluent English (C1+).</li><li></li><li>Preferred:</li><li></li><li>Wazuh, OpenTelemetry, SOC experience (Tier 1-3).</li><li>Security frameworks (ISO 27001, BSI), DFIR certs (CySA+, GIAC).</li><li>Kubernetes security (CKS/CNCF).</li></ul><p><br/></p><p><br/></p><p><br/></p><p><strong>Pay range and compensation package</strong></p><p><br/></p><p><br/></p><ul><li>Daily rate: depending on the profile</li><li>Location: Berlin + 3/4 days working remotely</li><li>Start date: June 29</li></ul><p><br/></p> </div>