SOC SIEM Platform Engineer - SIEM as Code (all humans)

Erste Group; Wien; Hybrid; EUR 50,000 - 61,000; Full time

Benefits offered by this job

Real platform ownership

Build & automate SIEM as code

Scale across countries

Learn with security & DevOps teams

Employee benefits

Job summary

Erste Digital is seeking a SOC SIEM Platform Engineer to design, build, and operate a scalable SIEM platform across Erste Group's countries. The role emphasizes IaC, automation, and platform engineering to run security operations as code.

Join a cross-functional team of security, DevOps and detection engineers delivering reliable, observable multi-tenant platforms with data quality and compliance across Europe.

Qualifications

• Hands-on experience engineering or operating SIEM, security analytics or large-scale logging platforms.
• Strong understanding of security telemetry pipelines: collection, parsing, normalization, data models.
• Experience with Infrastructure/Configuration as Code, Git, CI/CD and automated deployments.
• Scripting or programming skills; experience with APIs and system integrations.
• Familiarity with cloud infrastructure, access controls and secrets management.
• Strong operational mindset; ability to troubleshoot complex systems for reliability and observability.
• Professional fluency in English.
• Nice to have: cloud, container, telemetry tech; detection engineering; multi-tenant environments; related DevOps/security disciplines; German language skills welcome.

Responsibilities

• Build, expand and operate our central SIEM platform across multiple countries and entities.
• Design scalable architecture for ingesting, processing and normalizing security telemetry.
• Implement SIEM as Code using version control, Infrastructure as Code, automated pipelines and testing.
• Automate log source onboarding and build integrations across cloud, on-premises, SaaS and security platforms.
• Ensure platform reliability and observability by monitoring and troubleshooting data pipelines, performance and availability.
• Enable secure multi-tenancy while balancing shared Group capabilities with country and entity requirements.
• Collaborate with Detection Engineering, SOC and automation teams to continuously simplify, standardize and improve the platform.

Skills

SIEM engineering

Security telemetry pipelines

Infrastructure as Code

Git

CI/CD

Scripting/Programming

APIs & system integrations

Cloud infrastructure

Operational reliability

English fluency

Tools

Git

CI/CD

APIs

Job description

• Location: Vienna
• Working hours: Full-time
• Occupational Area: IT
• Company: Erste Digital

The future of banking is digital, and IT is the key to this change. Erste Digital is the digital enabler that drives innovative IT solutions for Erste Group, the leading banking group in CEE. Our service involves “run the bank” as well as “change the bank” activities. Our more than 2,000 IT experts and enthusiasts deliver best-in-class IT solutions and services to all Erste Group entities and by this directly to Erste Group’s more than 16 million customers.

Build the platform that enables security operations across countries

We are looking for a SOC SIEM Platform Engineer who combines security knowledge with a strong platform engineering and automation mindset. You will help us build and operate a modern SIEM platform used across multiple countries and entities within Erste Group. Your responsibility goes beyond keeping the platform running: you will continuously improve how it is deployed, configured, monitored and operated.
Our guiding principle is simple: Everything that can reasonably be managed as code should be managed as code.
Your mission is to develop our SIEM toward a scalable SIEM as Code/SOC as Code operating model - making security operations more automated, consistent and repeatable across an international environment.

Your Tasks

• Build, expand and operate our central SIEM platform across multiple countries and entities
• Design scalable architecture for ingesting, processing and normalizing security telemetry
• Implement SIEM as Code using version control, Infrastructure as Code, automated pipelines and testing
• Automate log source onboarding and build integrations across cloud, on-premises, SaaS and security platforms
• Ensure platform reliability and observability by monitoring and troubleshooting data pipelines, performance and availability
• Enable secure multi-tenancy while balancing shared Group capabilities with country and entity requirements
• Collaborate with Detection Engineering, SOC and automation teams to continuously simplify, standardize and improve the platform

Your Background

• Hands-on experience engineering or operating SIEM, security analytics or large-scale logging platforms
• Strong understanding of security telemetry pipelines, including collection, parsing, normalization and data models
• Experience with Infrastructure/Configuration as Code, Git, CI/CD and automated deployments
• Practical scripting or programming skills and experience with APIs and system integrations
• Familiarity with cloud infrastructure, access controls and secrets management
• Strong operational mindset with the ability to troubleshoot complex systems and build for reliability and observability
• Professional fluency in English
• Nice to have: Experience with cloud, container and telemetry technologies, detection engineering, multi-tenant environments or related DevOps/security disciplines. Relevant certifications and German language skills are also welcome.

Not sure you meet every qualification? We still encourage you to apply. We are interested in your capabilities, engineering mindset and what you can build - not in matching every keyword.

Our Offer

• Real platform ownership. Help shape a production SIEM platform at the core of security operations across a major European banking group.
• Build and automate. We treat our SIEM like a modern software platform - with configuration in code, automated pipelines and testing, reusable components and observability.
• Meaningful scale. Work across countries, entities and technologies, solving real challenges around scalability, multi-tenancy, data quality and reliability.
• Learn and collaborate. Work closely with analysts, detection engineers and security specialists across countries, with opportunities to grow across security, cloud, DevOps and platform engineering.
• Employee benefits – Benefit from special conditions for financial services and insurances, supermarkets, clothing stores and many more.
• Employee Referral Program – Become a talent scout for career opportunities in IT. We are rewarding every successful referral for Erste Digital
• A competitive and performance-related salary dependent on your professional and personal qualifications is granted - the minimum wage for this position in accordance with the respective collective agreement is EUR 55.356,-- gross per year. But this is just a formality, we are more than happy to discuss your actual expectations.
• Erste Digitalconsiders the diversity of its employees as key to innovation and success. As employer we are proud to offer everyone equal chances, irrespective of age, skin colour, religious belief, gender, sexual orientation or origin.