Security Architect (m/f/d)

EPAM Systems; Berlin; Hybrid; EUR 90.000 - 130.000; Vollzeit

Benefits dieser Stelle

30 days holiday per annum

Company Pension Scheme

Regular performance assessments

Flexible and remote working options

ESPP

Zusammenfassung

EPAM Systems is seeking a seasoned Security Architect with a strong SIEM deployment and migration background. The role focuses on designing, deploying, and optimizing enterprise SIEM solutions in regulated environments, collaborating with client cybersecurity teams and SOCs.

You will lead use-case development, rule tuning and dashboards, while guiding migrations, integrations and documentation across large-scale deployments.

Qualifikationen

• At least 10 years of experience in Cyber Security, focused on SIEM engineering and SOC.
• Bachelor’s degree in Computer Science, Information Security or related field (or equivalent).
• Expertise in SIEM engineering and architecture, with Splunk or other leading SIEM solutions (QRadar, ArcSight, LogRhythm, Azure Sentinel).
• Experience delivering SIEM enhancements and automation, including SOAR/XDR integration.
• Proficiency in integrating log sources and developing correlation rules, alerts and dashboards.
• Experience with cloud logs in AWS, Azure, GCP and SIEM integration.
• Ability to communicate with business and regulatory requirements; strong stakeholder skills.

Aufgaben

• Lead design, deployment and configuration of SIEM solutions with log sources.
• Plan and execute SIEM migration projects, including data transfer and rule/alert migration.
• Develop and tune SIEM use cases, correlation rules, dashboards and reports.
• Integrate diverse log sources into the SIEM for comprehensive monitoring.
• Collaborate with the SOC to create and finetune use cases per SOC requirements.
• Regularly review and optimise SIEM performance and reporting.
• Document SIEM configurations, integrations and migration processes.
• Train and mentor junior security engineers and SOC analysts.
• Coordinate with IT/security teams to align SIEM with strategy.

Kenntnisse

SIEM engineering

Architecture

SOAR and XDR integration

Log source integration

Alerts and dashboards

Cloud logs integration

Stakeholder management

Ausbildung

Bachelor’s degree in Computer Science or Information Security

Tools

Splunk

QRadar

ArcSight

LogRhythm

Azure Sentinel

Jobbeschreibung

EPAM is seeking a seasoned Security Architect with a strong SIEM (Security Information and Event Management) deployment and migration background. The ideal candidate will have good experience in architecture, design, implementation, migration and optimization of modern SIEM solutions in highly regulated environments like finance and insurance, among others. The ideal candidate should also have a background working within an Enterprise SOC with proven hands‑on experience in detection and response to security events and incidents.

The architect will work closely with the client to understand the current and target state of the SIEM solutions. The most successful candidate will be a strong technologist with a practical approach to designing SIEM solutions within large enterprises. This candidate must be able to effectively collaborate with the client’s cybersecurity teams and SOCs to deliver optimal results. In addition, the SIEM Architect must be able to clearly and successfully communicate with a demonstrated understanding of the business and technical requirements of the client.

Responsibilities

• Lead the design, deployment and configuration of SIEM solutions, ensuring seamless integration with various security tools, systems and log sources
• Plan and execute SIEM migration projects, including data transfer, log source integration, rule/alert migration and configuration tuning
• Develop, customise and fine‑tune SIEM use cases, correlation rules, dashboards and reports to effectively detect threats and suspicious activities
• Integrate diverse log sources such as firewalls, IDS/IPS, antivirus, cloud services, applications and operating systems into the SIEM for comprehensive monitoring
• Collaborate with the SOC (Security Operations Center) team to support further use case creation and finetuning following SOC team requirements
• Regularly review and optimise SIEM performance to ensure efficient log collection, storage, processing and alerting
• Maintain comprehensive documentation for SIEM configurations, integrations client and migration processes, providing regular reports on SIEM performance
• Train and mentor junior security engineers and SOC analysts on SIEM use, best practices and troubleshooting
• Work closely with IT, security and network teams to ensure the SIEM platform aligns with security strategies and goals

Requirements

• At least 10 years of experience in Cyber Security Most of which specialised in engineering SIEM solutions and working in a SOC
• Bachelor’s degree in computer science, Information Security or a related field (or equivalent experience)
• Expertise in SIEM engineering and architecture, with a focus on at least Splunk or any other leading SIEM solutions like QRadar, ArcSight, LogRhythm and Azure Sentinel among others
• Experience in managing the full delivery lifecycle for SIEM enhancements and automation including working on converged SIEM solutions that include SOAR and XDR solutions within it
• Proficiency in integrating log sourcesanddeveloping correlation rules, alerts and dashboards
• Experience working in cloud environments (AWS, Azure, GCP) and integrating cloud logs into SIEM solutions
• Understanding security frameworks (MITRE ATT&CK, NIST, ISO 27001) and regulatory compliance (GDPR, PCI-DSS)
• Knowledge of network protocols, firewalls, IDS/IPS, endpoint security and threat intelligence
• Ability to understand the client’s needs, their specific security challenges and the regulatory landscape to provide tailored solutions
• Ability to manage stakeholders at various levels, from technical staff to senior executives and effectively communicate complex technical concepts to clients. To work effectively with teams from different departments within large organisations and enterprises

Nice to have

• Proven experience with multiple SIEM solutions
• Hands‑on experience with SIEM migration projects, including planning, execution and troubleshooting
• Familiarity with scripting languages (Python, PowerShell, Bash) for automation and data parsing
• SIEM‑specific certifications such as Splunk Certified Architect, IBM QRadar Certification or ArcSight Certified Security Analyst
• Security certifications such as CISSP, CEH, CompTIA CASP+ or GIAC are an advantage

We offer

• 30 days holiday per annum
• Company Pension Scheme
• Regular performance assessments
• Discount on Fitness‑First Black Membership
• bitkom - Corporate Benefits
• Employee Stock Purchase Plan (ESPP) (subject to certain eligibility requirements)
• Learning and development opportunities, including in‑house training and coaching, professional certifications, and courses
• Friendly and enjoyable working team
• Regular corporate and social events
• Flexible and remote working opportunities
• Award‑winning workplace: Great Place To Work® certified in 2026, Kununu (Top Company 2022–2026), NewWork Business Award 2025 for outstanding culture, innovation and employee satisfaction.