Platform Engineer: Observability, SIEM & Automation

Berenberg Green Energy Debt; Greater London; On-site; GBP 85,000 - 105,000; Full time

Benefits offered by this job

Private pension plan

Private Health Insurance

Enhanced parental leave

Employee Assistance Programme

Job summary

Berenberg in London is seeking a Platform Engineer for MONSO, focusing on monitoring, observability and SIEM, and enabling self-service infrastructure through as-code platforms on Kubernetes.

You will build and scale SIEM tooling, integrate data pipelines, and collaborate with CyberSecurity and development teams to automate detection and response, while embracing CI/CD and GitOps practices in a hybrid cloud environment.

Qualifications

• Self-starter with automation-first CI/CD mindset.
• Strong observability and telemetry background with Splunk.
• Hands-on Kubernetes deployment and operations experience.
• Solid networking fundamentals and telemetry knowledge.
• Proficient in Python and Linux shell scripting.
• Experience with CI/CD tooling and GitOps practices.
• Knowledge of security analytics tools (SIEM/XDR) is a plus.

Responsibilities

• Build and maintain monitoring, observability, and SIEM tooling with IaC.
• Deploy, scale and automate workloads on internal Kubernetes platform.
• Develop self-service automations for data onboarding and detection use cases.
• Ensure robust integration across hybrid infrastructure and network telemetry.

Skills

DevOps mindset

Monitoring observability

Kubernetes

Networking fundamentals

Python scripting

Linux administration

CI/CD tooling

GitOps practices

SIEM experience

Splunk

Tools

Splunk Enterprise

Kubernetes

Splunk Observability Cloud

SolarWinds

Cisco Secure Network Analytics

Rapid7

OpenTelemetry collectors

Prometheus

Grafana

GitLab CI

GitHub Actions

Job description

Berenberg in London is seeking a Platform Engineer for MONSO, focusing on monitoring, observability and SIEM, and enabling self-service infrastructure through as-code platforms on Kubernetes.

You will build and scale SIEM tooling, integrate data pipelines, and collaborate with CyberSecurity and development teams to automate detection and response, while embracing CI/CD and GitOps practices in a hybrid cloud environment.