Platform Engineer – Monitoring, Observability & SIEM (MONSO)

Berenberg Green Energy Debt; Greater London; On-site; GBP 85,000 - 105,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave

Employee Assistance Programme

Job summary

Berenberg in London is seeking a Platform Engineer for MONSO, focusing on monitoring, observability and SIEM, and enabling self-service infrastructure through as-code platforms on Kubernetes.

You will build and scale SIEM tooling, integrate data pipelines, and collaborate with CyberSecurity and development teams to automate detection and response, while embracing CI/CD and GitOps practices in a hybrid cloud environment.

Qualifications

• Self-starter with automation-first CI/CD mindset.
• Strong observability and telemetry background with Splunk.
• Hands-on Kubernetes deployment and operations experience.
• Solid networking fundamentals and telemetry knowledge.
• Proficient in Python and Linux shell scripting.
• Experience with CI/CD tooling and GitOps practices.
• Knowledge of security analytics tools (SIEM/XDR) is a plus.

Responsibilities

• Build and maintain monitoring, observability, and SIEM tooling with IaC.
• Deploy, scale and automate workloads on internal Kubernetes platform.
• Develop self-service automations for data onboarding and detection use cases.
• Ensure robust integration across hybrid infrastructure and network telemetry.

Skills

DevOps mindset

Monitoring observability

Kubernetes

Networking fundamentals

Python scripting

Linux administration

CI/CD tooling

GitOps practices

SIEM experience

Splunk

Tools

Splunk Enterprise

Kubernetes

Splunk Observability Cloud

SolarWinds

Cisco Secure Network Analytics

Rapid7

OpenTelemetry collectors

Prometheus

Grafana

GitLab CI

GitHub Actions

Job description

Platform Engineer – Monitoring, Observability & SIEM (MONSO)

For our SPEAR Technology (Security, Platform Engineering, Automation and Runtime) division in London we are looking to hire a:

Platform Engineer – Monitoring, Observability & SIEM (MONSO)

Like solving puzzles with an inquisitive mind?

Think outside the box and challenge the status quo?

Prefer simplicity over complexity and automation over manual effort?

Have a self-starter mindset with a drive to take proactive ownership?

Then consider joining Berenberg’sSPEAR Technology programme. SPEAR consists of our CyberSecurity team and several platform engineering teams responsible for Monitoring, Observability, Kubernetes, Developer Platform, Network, and Datacentre Infrastructure.

Due to each team’s compact size, all team members are subject matter experts offering an excellent environment to learn continuously, share unique skills, and make a noticeable, impactful contribution across the bank.

Your role in the team

The MONSO (Monitoring and Security Operations) platform team is evolving towards a modern platform engineering and self-service model. Rather than handling manual operational requests, our focus is building "as-code" platforms and automations that enable other teams to do more themselves—such as empower-ing our SOC/CyberSec team to develop (including AI-assisted workflows), test, and deploy SIEM use cases independently via CI/CD.

The platform spans Splunk Enterprise on-prem (running on Kubernetes), Splunk Observability Cloud, and SolarWinds, with future expansion into Cisco Secure Network Analytics, Cisco XDR, and Rapid7.

What will you do?

• Build and maintain our monitoring, observability, and SIEM tooling using modern platform engineering practices (Infrastructure/Configuration as Code).
• Deploy, scale, and automate platform workloads (including Splunk and custom automations) on our internal Kubernetes platform.
• Develop pipelines and self-service automations that allow the CyberSec/SOC team and developers to onboard data and deploy detection use cases autonomously.
• Ensure robust integration across hybrid infrastructure, log pipelines, and network telemetry.

Who are we looking for?

• Self-Starter & DevOps Mindset: Proactive problem solver who champions automation-first, CI/CD pipelines, code reviews, and self-service enablement.
• Modern Observability & Telemetry: Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and also configuring OpenTelemetry collectors and pipelines; knowledge of Prometheus and Grafana or similar tools.
• Kubernetes (Power User): Strong, hands-on experience deploying and operating workloads, stateful appli-cations, Helm charts, and manifests on K8s (cluster administration is managed by a dedicated team).
• Good Networking Knowledge: Firm grasp of networking fundamentals (TCP/IP, DNS, TLS, load balancing, firewalls) and network telemetry (NetFlow/IPFIX, SNMP, syslog).
• Scripting & Automation: Strong proficiency in Python and Linux/Bash scripting to build integrations, CLI tools, and automated pipelines.
• Linux: Confident with enterprise Linux administration, troubleshooting, and system performance.
• Splunk administration, Splunk on Kubernetes (Splunk Operator), Enterprise Security (ES), or ITSI.
• Familiarity with network security/XDR tooling (Cisco Secure Network Analytics / Stealthwatch, Cisco XDR, Rapid7).
• Experience with CI/CD tooling (GitLab CI, GitHub Actions) and GitOps practices.
• Exposure to automated or AI-assisted SIEM detection engineering and SOAR concepts.
• Incident and Capacity Management understanding.

What we offer you:

• Private pension plan - 10% of base salary contribution by Berenberg
• Private Health Insurance
• Enhanced parental leave policies
• Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics

We are a leading European private bank, with over 430 years of experience and deep rooted history, but we are still shaping and heavily investing in our future. Our progress and evolution are driven by our people. We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We’re an ambitious, forward-looking business, backed by centuries of tradition and built on innovation. You’ll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo.

We place great importance on working on site, as we believe that being together in the office not only fosters creativity and efficiency, but also strengthens networks and builds trusting, collegial relationships. For us, this forms the foundation for productive and successful work. Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business – Our future is where you take us!

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation. We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace. Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential. We’re committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process. Please contact us directly on [e-mail] to discuss.