Senior Security Engineer; SecOps

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer (Sec Ops) based in Germany.

This is an exciting opportunity for an experienced cybersecurity professional to take ownership of Security Operations within a fast-growing, technology-driven environment. In this role, you will design, implement, and optimize security monitoring, incident response, and detection capabilities across modern cloud and infrastructure ecosystems. Working closely with engineering, platform, IT, compliance, and leadership teams, you will help strengthen organizational resilience through proactive threat detection, automated response workflows, and robust security controls.

The position offers significant autonomy and the chance to build scalable Sec Ops processes from the ground up while working with advanced cloud technologies, security tooling, and distributed systems. Ideal for someone who combines strong technical expertise with strategic thinking, this role provides meaningful impact on the overall security posture of a rapidly evolving organization.

• Design and establish a centralized Security Operations model, including process ownership, escalation paths, service-level expectations, incident workflows, reporting frameworks, and post-incident review practices.
• Build and maintain SIEM and log management capabilities, ensuring centralized log collection, normalization, retention policies, access controls, monitoring coverage, and audit readiness.
• Develop, implement, and continuously improve detection rules and alerting mechanisms across authentication systems, IAM platforms, cloud infrastructure, Kubernetes environments, CI/CD pipelines, databases, applications, and endpoints.
• Lead incident response activities, including investigation, containment, eradication, recovery, evidence collection, root cause analysis, and continuous improvement initiatives.
• Automate operational security processes such as alert enrichment, ticket creation, incident notifications, account containment, endpoint isolation, and response orchestration.
• Collaborate with IT and infrastructure teams to strengthen endpoint security through device management, encryption, patching, firewall controls, compliance monitoring, and endpoint protection technologies.
• Partner with engineering, platform, compliance, legal, and management teams to support logging strategies, vulnerability management, policy development, audit preparation, and security governance initiatives.
• Contribute to the ongoing enhancement of security monitoring capabilities, operational efficiency, and organizational cyber resilience.

• 5+ years of hands‑on experience in Security Operations, Security Engineering, or a related cybersecurity role, with a focus on building or improving Sec Ops processes in production environments.
• Strong experience implementing, managing, or optimizing SIEM and log management platforms, including log collection, parsing, normalization, correlation, alerting, dashboard creation, and retention management.
• Practical experience working with cloud and infrastructure security logs, including cloud audit trails, security monitoring services, network flow logs, authentication events, and application activity logs.
• Demonstrated expertise in designing detection rules, correlation logic, and alerting strategies based on real‑world threat scenarios and attack techniques.
• Strong understanding of security monitoring frameworks, adversary tactics, detection engineering principles, and incident response life cycles.
• Experience with endpoint security technologies such as EDR, XDR, antivirus solutions, mobile device management, endpoint compliance controls, and device hardening practices.
• Solid knowledge of identity and access management, authentication systems, network security concepts, and common attacker behaviors.
• Proficiency in scripting or automation using Python, Bash, Go, or similar languages for integrations, alert enrichment, reporting, and incident response workflows.
• Ability to work independently, drive initiatives from concept to implementation,…