Senior SIEM Engineer: Detection & Automation Lead

Boehringer Ingelheim GmbH; Hinoba-an; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Boehringer Ingelheim GmbH is seeking a Senior SIEM Engineer for Cybersecurity Detection to strengthen security monitoring, detection engineering, and automation. You will develop and enhance SIEM/XDR use cases, integrate security technologies, and collaborate with cross-functional teams to mitigate security risks.

The ideal candidate has hands-on experience with SIEM/XDR platforms (Splunk/Sentinel/Defender), scripting skills, and strong English communication in a virtual, international

Qualifications

• Experience developing SIEM/XDR use cases and detection content.
• Proficiency in Python/PowerShell/Bash scripting and API integration.
• Experience with BAS threat creation is a plus.
• Familiar with reporting/ticketing platforms like ServiceNow.
• Strong English communication and cross-cultural collaboration.

Responsibilities

• Implement new security use cases on the SIEM/XDR.
• Fine-tune use cases to reduce false positives.
• Develop scripts and integrations for SIEM/XDR.
• Maintain existing scripts and integrations.
• Support simulated threats to test use cases.
• Evolve technologies per roadmap.
• Collaborate with Security Detection and Incident Response teams.
• Deliver reports and dashboards to stakeholders.
• Ensure documentation per SOPs and processes.
• Present monitoring status to technology experts and management.

Skills

SIEM/XDR use cases

Python scripting

PowerShell

Bash scripting

API integration

Analytical thinking

English communication

Cross-cultural teamwork

Tools

Splunk

Microsoft Sentinel

Microsoft Defender

ServiceNow

Job description

Boehringer Ingelheim GmbH is seeking a Senior SIEM Engineer for Cybersecurity Detection to strengthen security monitoring, detection engineering, and automation. You will develop and enhance SIEM/XDR use cases, integrate security technologies, and collaborate with cross-functional teams to mitigate security risks.

The ideal candidate has hands-on experience with SIEM/XDR platforms (Splunk/Sentinel/Defender), scripting skills, and strong English communication in a virtual, international