Senior SOC Engineer

N26; Berlin; Hybrid; EUR 75.000 - 95.000; Vollzeit

Zusammenfassung

A leading fintech company is seeking a Senior / Lead SOC Platform Engineer to enhance cloud-based logging and automation platforms for its Security Operations Center. The role involves leading initiatives to improve detection capabilities across the organization while collaborating with various teams. Ideal candidates will have extensive experience in SOC, cloud engineering, and large-scale logging pipelines, alongside deep skills in AWS and SIEM systems. This hybrid position is based in Berlin, offering competitive benefits and opportunities for growth.

Leistungen

Competitive personal development budget

Work from home budget

Discounts to fitness & wellness memberships

Additional annual leave for each year of service

Qualifikationen

• Strong understanding of SOC operations and modern telemetry requirements.
• Experience automating data validation and health checks.
• Proven experience with large-scale logging pipelines.

Aufgaben

• Lead SOC engineering initiatives including SOC automation and SIEM integration.
• Own data ingestion workflows for the SIEM system.
• Collaborate with various teams to improve platform reliability.

Kenntnisse

AWS (S3, IAM, Lambda, Kinesis)

SIEM ingestion pipelines

Infrastructure as Code (Terraform)

Python

Bash

MITRE ATT&CK mapping

deceptive security technologies

Ausbildung

5+ years in SOC engineering or related field

Tools

Google SecOps (Chronicle)

Terraform

Jobbeschreibung

About the Opportunity

We are seeking a Senior / Lead SOC Platform Engineer to own and evolve the cloud-based logging and automation platforms that power our Security Operations Center. Our SOC Engineering team designs scalable AWS logging pipelines and manages ingestion into Google SecOps, and believes in proactive security, automation, and continuous improvement to stay ahead of evolving threats.

In this role you will lead key initiatives that strengthen visibility, automation, and detection capabilities across the organization.

Hybrid role based in Berlin or Barcelona.

In This Role, You Will:

• Lead SOC engineering initiatives including SOC automation, SIEM–IT Service Management (ITSM) integration, and threat framework mapping and adoption (e.g., MITRE ATT&CK).
• Own data ingestion workflows for the Security Information and Event Management (SIEM) system and ensure high-quality, reliable telemetry.
• Support and integrate deceptive security technologies and participate in purple team exercises to enhance visibility and detection coverage.
• Collaborate with detection engineering, incident response, cloud teams, and security leadership to improve platform reliability and SOC effectiveness.

What You Need to Be Successful

Background:

• 5+ years of experience in SOC engineering, security engineering, cloud engineering, or platform engineering.
• Proven experience designing and operating large-scale logging pipelines in cloud environments.
• Strong understanding of SOC operations, detection workflows, and modern telemetry requirements.

Skills:

• Deep hands‑on experience with AWS (S3, IAM, Lambda, Kinesis, CloudWatch, Step Functions, Glue, Athena, Glacier).
• Expertise with SIEM ingestion pipelines, ideally Google SecOps (Chronicle) with S3 ingestion.
• Strong understanding of log structures (JSON, CloudTrail, VPC Flow Logs, Syslog) and schema normalization.
• Proficiency with Infrastructure as Code (Terraform preferred).
• Strong scripting/programming skills (Python, Bash).
• Experience automating data validation, log onboarding, and pipeline health checks.
• Familiarity with MITRE ATT&CK mapping workflows using Navigator.
• Exposure to deceptive security technologies and telemetry pipelines.
• Experience supporting purple team exercises from a telemetry and engineering perspective.

Nice to Haves

• Google SecOps(Chronicle) engineering experience.
• Experience implementing automation for next‑generation or Agentic SOC capabilities.
• Experience with deception frameworks (e.g., Canary, Thinkst, IllusionBLACK).

What’s in it for you:

• Accelerate your career growth by joining one of Europe’s most talked about disruptors 🚀.
• Employee benefits that range from a competitive personal development budget, work from home budget, discounts to fitness & wellness memberships, language apps and public transportation.
• As an N26 employee you will have access to a Premium subscription on your personal N26 bank account. As well as subscriptions for friends and family members.
• Additional day of annual leave for each year of service.
• A high degree of autonomy and access to cutting edge technologies - all while working with a friendly team of peers of diverse nationalities, life experiences and family statuses.
• A relocation package with visa support for those who need it.

Who we are

N26 has reimagined banking for today’s digital world. Technology and design empower everything we do and it’s how we are building the global banking platform the world loves to use.

We've eliminated physical branches, paperwork, and hidden fees for an elegant digital experience and supreme savings. Giving people the power to live and bank their way is what gets us out of bed in the morning and inspires the work that we do.

We are headquartered in Berlin with offices in multiple cities across Europe, including Vienna and Barcelona, and a 1,500‑strong team of more than 80 nationalities.

Sounds good? Apply now for this position.

Equal Opportunities:

We recognize that our strength lies in our people and the varied perspectives they bring to our workforce. We strive to build talented and diverse teams to drive our business success and empower our people to reach their full potential.

We genuinely welcome and encourage applications from people of all backgrounds, cultures, genders, sexual orientations, abilities, neurodiversities, and ages. We're committed to creating an inclusive workspace where everyone feels valued and respected, free from harassment and discrimination. If there's anything you need to make the application process work for you, please let us know by reaching out to [e-mail].

Visit our website to learn more about Diversity, Equity, & Inclusion at N26.