Senior SIEM Engineer (f/m/x)

We are looking for an experienced SIEM Engineer to join a project in the energy sector. In this role, you will be responsible for designing, administering, and improving SIEM platforms that support threat detection, incident handling, and regulatory compliance. A key focus will be building and optimizing data ingestion, processing, and analysis workflows within a complex, global IT environment.

Your tasks

• Designing, configuring, maintaining, and monitoring the SIEM platform and related infrastructure
• Collecting and onboarding security logs from various sources such as identities, endpoints, networks, cloud, and business applications
• Creating reliable data pipelines and developing parsing, normalization, transformation, and contextual enrichment processes
• Monitoring telemetry health and troubleshooting missing sources, ingestion delays, volume anomalies, and connector failures
• Supporting detection engineering by providing required fields, correlation logic, threat intelligence, and testing
• Optimizing ingestion, storage, retention, query performance, and costs without reducing required security visibility
• Maintaining architecture diagrams, log source inventory, onboarding standards, runbooks, and configuration records
• Supporting SOC investigations, threat hunting, incident response, and audits

Requirements

• Minimum 3 years of experience in SIEM engineering, security monitoring, or log management
• Hands-on experience with SIEM platforms, preferably Microsoft Sentinel, but also Splunk, QRadar, Elastic, or Google SecOps
• Experience onboarding logs and troubleshooting in Windows, Linux, cloud, network, endpoint, and application environments
• Proficiency in KQL, SPL, SQL, or similar query languages
• Knowledge of syslog, APIs, agents, collectors, event streaming, and parsing and enrichment processes
• Previous work in scripting or automation using PowerShell, Python, REST API, Git, CI/CD, or infrastructure-as-code
• Understanding of detection engineering, incident response, digital forensics, and network security
• English language proficiency at a minimum B2 level

Nice to have

• Experience in regulated critical infrastructure, energy, or OT environments
• Knowledge of NIS2, ISO/IEC 27001, IEC 62443, and security log retention requirements
• Microsoft, Splunk, GIAC, CISSP, CISM, or equivalent certifications

Job no. JOB-E4BP6

Sii ensures that all hiring decisions are made solely on the basis of qualifications and competence. We are committed to equal and fair treatment of all, regardless of legally protected characteristics. At Sii, we promote a diverse and inclusive work environment, in full compliance with applicable anti-discrimination laws.

Benefits For You

• Great Place to Work
• Solid financial situation
• Contracts with the biggest brands
• Centre of internal trainings
• Many experts you can learn from
• Open and accessible management team
• Profit sharing
• Passion Sponsorship program
• Regular integration events and trips
• Comfortable and well-equipped offices
• MySii app
• Medical care