Senior SIEM Engineer im Security Operations Center (SOC) (m/w/div)

Salary: 40.000 - 65.000 € per year

Requirements:

A completed college degree (bachelors, diploma) in IT or an equivalent qualification, such as an IT-specific certification or completed vocational training in IT with relevant work experience

Several years of practical professional experience in setting up one or more security platforms (e.g., SIEM, vulnerability scanners, log management, EDR, SOAR, etc.)

Experience in the areas of data center infrastructure, operating systems (Linux/Windows), container environments, and network protocols

Willingness to be on call, as well as to undertake occasional business trips within Germany and attend training courses/events outside the Berlin and Würzburg locations

Business-level proficiency in spoken and written German

Strong analytical skills, coordination abilities, the ability to work independently and organize your own tasks, strong problem-solving skills, and excellent communication skills

Responsibilities:

Analyzing and optimizing existing systems and tools

Planning, managing, configuring, and evaluating security monitoring

Designing and implementing use cases while considering the holistic lifecycle

Onboarding new data sources and ensuring the data quality of existing sources

Contributing to the design, implementation, and further development of security monitoring and SOC processes

Supporting the introduction and migration of platform technologies

Contributing to the execution of PoCs

Integrating SOC systems with other systems, such as ticketing systems and log sources, via APIs and other interfaces

Contribute to and help design the setup and configuration of a new SIEM platform

Create and maintain documentation on systems, configurations, and processes

Technologies:

Support

Linux

Network

Security

Windows

More:

We are the DRV Bunds Department 16, Corporate Security, serving as the central service provider for IT and physical security, protection of personal data, confidentiality, emergency management, and cross-functional policy responsibilities. Our Security Operations Center (SOC) manages operational IT security for DRV Bund and affiliated pension insurance agencies, operating specialized systems to detect vulnerabilities and attacks and to respond to IT security incidents as the central point of contact. Within the SOC, our Security Monitoring Team operates and configures the SIEM system and develops automation processes, new data source onboarding, and use cases. The position is based in Berlin or Würzburg, with part-time, full-time, fixed-term, and permanent employment options, a start date as soon as possible, and compensation at Pay Grade 12, TV EntgO-DRV (56,962.53–89,012.32 euros). Benefits include 30 vacation days with a 5-day workweek, annual bonuses and capital-forming benefits, continuing education and professional development opportunities, a company pension plan (VBL), and job security. We will conduct interviews with shortlisted candidates, and this role includes a security screening following a job offer. We also support employees with family responsibilities by reimbursing additional, necessary, and unavoidable childcare costs for business trips or training opportunities.

last updated 36 week of 2026