Platform and Integration Engineer, Security Telemetry

RedMimicry GmbH; Berlin; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

RedMimicry GmbH is building a capability that turns fragmented security logs into explainable, AI-powered threat analysis within the RedMimicry platform. As Platform and Integration Engineer, you will connect security telemetry to our services and enable deployment in cloud, on‑premises, and restricted customer environments.

You will work with SIEM, EDR, NDR, OS and network data; containerised services; and enterprise environments with strict security and data residency requirements.

Qualifikationen

• Strong Linux administration and troubleshooting skills.
• Docker or comparable container tooling.
• CI/CD, configuration management, deployment automation, and observability.
• Networking fundamentals, TLS, proxies, routing, DNS, and firewall behaviour.
• Secure configuration and least-privilege operation.
• Experience integrating heterogeneous third-party systems and APIs.
• Go, Python, shell scripting, or comparable automation skills.

Aufgaben

• Build Security-Data Ingestion: Design and implement import paths for SIEM, EDR, NDR, OS and related telemetry.
• Normalise Critical Metadata: Standardise timestamps and expose host, user, process, and network identities without destroying provenance.
• Build Reproducible Test Environments: Maintain fixtures and environments for ingestion and regression testing.
• Package and Operate the Services: Containerise services and implement deployment automation, monitoring, and health checks.
• Support On-Premises and Restricted Environments: Develop reliable installation and upgrade processes for customer-operated environments.
• Automate Validation and Recovery: Build environment checks, smoke tests, backup and restore workflows, and diagnostic tooling.
• Support Customers: Prepare, install, troubleshoot, and validate customer environments.
• Document Operations: Maintain deployment guides, runbooks, and known limitations.

Kenntnisse

Linux administration

Docker

CI/CD

Networking fundamentals

Security and compliance

English

Tools

Splunk

Elastic

Microsoft Sentinel

Jobbeschreibung

We are building a new capability that turns fragmented, noisy security logs into explainable, AI-powered threat analysis, delivered inside the RedMimicry platform.

As Platform and Integration Engineer at RedMimicry, you will connect our security-analysis services to real security telemetry and make them deployable in cloud, on-premises, and restricted customer environments.

You will work with SIEM, EDR, NDR, operating-system, and network exports; containerised services; GPU-backed workloads; and enterprise environments with strict security and data-residency requirements.

This is not a pure DevOps position. You must understand the structure and failure modes of security telemetry and build reliable interfaces between customer systems, our analysis services, and the existing RedMimicry platform.

What You’ll Do

• Build Security-Data Ingestion: Design and implement import paths for SIEM, EDR, NDR, operating-system, and related security telemetry.
• Normalise Critical Metadata: Standardise timestamps and expose relevant host, user, process, and network identities without destroying source provenance.
• Build Reproducible Test Environments: Maintain fixtures and environments for ingestion and regression testing.
• Package and Operate the Services: Containerise our services and implement deployment automation, monitoring, logging, and health checks.
• Support On-Premises and Restricted Environments: Develop reliable installation and upgrade processes for customer-operated environments.
• Automate Validation and Recovery: Build environment checks, smoke tests, backup and restore workflows, and diagnostic tooling.
• Support Customers: Prepare, install, troubleshoot, and validate customer environments.
• Document Operations: Maintain deployment guides, runbooks, and known limitations.

Skills

You do not need to meet every requirement to apply. We are looking for strong systems judgement and the ability to debug across application, operating-system, network, and infrastructure boundaries.

• Systems and Infrastructure
  • Strong Linux administration and troubleshooting skills
  • Docker or comparable container tooling
  • CI/CD, configuration management, deployment automation, and observability
  • Networking fundamentals, TLS, proxies, routing, DNS, and firewall behaviour
  • Secure configuration and least-privilege operation
• Integration Engineering
  • Experience integrating heterogeneous third-party systems and APIs
  • Robust handling of files, streams, schemas, encodings, timestamps, and version drift
  • Go, Python, shell scripting, or comparable automation skills
  • Test fixtures, integration tests, and compatibility testing
• Security Telemetry
  • SIEM, EDR, NDR, SOAR, Windows event logs, Sysmon, Linux audit data, or network telemetry
  • Splunk, Elastic, Microsoft Sentinel, or comparable platforms are a plus
  • Understanding of host, process, identity, and network artefacts
• Cloud and On-Premises Deployment
  • Production cloud services and multi-tenant architectures
  • On-premises software packaging and enterprise installation workflows
  • Air-gapped or restricted environments
  • GPU infrastructure or model-serving experience is a plus
• Security and Compliance
  • Experience with hardening, audit logging, data residency, or BSI IT-Grundschutz is a plus
• Languages
  • English (required)
  • German (professional working proficiency strongly preferred due to customer work)

Other Requirements

• Existing legal right to work in Germany and primary residence in Germany
• Clean criminal record certificate
• Willingness to travel to the Berlin office approximately once per month
• Willingness to travel to customer sites within Germany when required