Public summary
Seeking a senior cybersecurity professional to lead detection and response efforts in a growing e-commerce software company. This remote-first role focuses on SIEM ownership, detection engineering, incident response, security hardening, and managing relationships with security partners. Candidates should have hands-on experience building detection capabilities, investigating security incidents end-to-end, and implementing security baselines. Fluent English required.
Location and work setup
- Location
- Cologne
- Remote status
- Remote
- German requirement signal
- No German Required Detected
- Detected job language
- English
Responsibilities
- Own and develop the SIEM platform including data source onboarding, parsing, normalization, and coverage decisions. - Write, tune, and maintain detection content beyond vendor defaults; treat detections as code with version control and testing. - Investigate and lead technical handling of security incidents from initial alert through resolution. - Conduct proactive threat hunting using company telemetry. - Design and implement security baseline hardening across endpoints, servers, identity, and cloud environments. - Collaborate with IT and engineering teams to apply and maintain security standards. - Manage engineering relationships with external security partners, including scope and escalation. - Make strategic build-versus-buy decisions related to detection and response tooling, considering cost implications.
Qualifications
- Proven experience building or rebuilding detection capabilities in production environments. - Proficient in writing and tuning detection content and fluent in SIEM query languages. - Hands-on experience investigating security incidents from start to finish. - Experience designing and deploying security hardening baselines. - Strong scripting skills in PowerShell, Python, or equivalent, with a focus on automation. - Ability to set and enforce technical standards without formal authority. - Fluent English, both written and spoken.