Cyber security engineer in SOC

PŸUR; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Childcare subsidies

Company pension scheme

Travel allowance

Reimbursement of account management/py

PYUR Training Academy

Job summary

Компания PŸUR ищет специалиста по SOC, чтобы управлять и развивать ко-менеджируемый SOC, адаптируя его под требования критической оптоволоконной сети. Вы будете работать с нашей сервисной командой и SOC-партнером, внедрять ИИ‑поддержку для снижения нагрузки и принимать решения вместе с людьми.

Ключевые задачи включают развитие SIEM/EDR/SOAR, интеграцию новых источников данных, автоматизацию процессов и угроз-охоту, а также сотрудничество с командами сетевой инфраструктуры и архитектуры.

Qualifications

• Опыт работы в SOC и навыки обнаружения, инцидент-ответа и threat intel.
• Опыт работы с SIEM (Microsoft Sentinel, Splunk, Elastic) и интеграцией инструментов безопасности.
• Навыки программирования (Python, Go, Bash, PowerShell) и продвинутый Linux.
• Свободное владение немецким и очень хорошее английским.
• Плюсом будет опыт OT-безопасности и облаков (Azure, AWS, GCP) и Detection-as-Code.

Responsibilities

• Владение и развитие инструментов SOC (SIEM, EDR, SOAR).
• Подключение новых источников данных и создание детекционных кейсов.
• Автоматизация SOC-воркфлоу и предварительная оценка тревог с точками согласования.
• Проведение threat hunting и риск-аналитики.
• Кросс-функциональная работа с командой сервиса, NOC, архитектурой и разработкой.
• Участие в дежурстве по эскалациям, ротируемое между командой.

Skills

SOC опыт

Threat hunting

Incident response

Threat intelligence

Automation scripting

Linux

Немецкий язык

Английский язык

Education

Степень в информатике или эквивалент

Tools

Microsoft Sentinel

Splunk

Elastic

EDR

SOAR

Job description

Описание:

You develop our Co-Managed SOC and make it fit for the requirements of a critical fiber-optic network. Our service team operates the platform, our SOC partner monitors it around the clock, and you shape and manage it. You use AI where it reduces the workload; decisions remain with people.

Задачи:

• Take functional responsibility for and further develop our security tools (including SIEM, EDR, SOAR)
• Connect new data sources from IT and network infrastructure and develop detection use cases
• Automate SOC workflows, including AI-supported preliminary alert assessment with clear approval points
• Conduct threat hunting and risk and threat analyses
• Work closely with the service team, network operations/NOC, architecture, and development
• Take part in on-call duty for escalations, rotating with the team

Требования:

• A degree in (business) informatics or a similar field, or vocational training combined with extensive practical experience in IT security
• Several years of SOC experience, ideally in detection engineering, threat hunting, incident response, or threat intelligence
• Extensive experience with SIEM solutions (e.g. Microsoft Sentinel, Splunk, Elastic), including use case development and integration of security tooling (EDR, SOAR, vulnerability scanners)
• Experience with risk and threat analyses in IT and OT environments
• Programming and scripting skills (e.g. Python, Go, Bash, PowerShell) for automation, as well as advanced Linux skills
• Fluent German and very good English
• Будет плюсом: Knowledge of OT security (e.g. industrial protocols, IEC 62443) and cloud environments (Azure, AWS, GCP), as well as experience with automation and Detection-as-Code (CI/CD, Infrastructure-as-Code)

Условия:

• Mobile work model and home-office options with appropriate IT equipment, flexible working hours, and lunch options at the offices
• Attractive additional benefits such as childcare subsidies, company pension scheme, travel allowance, and reimbursement of account management fees
• Advice and support with topics such as health, family, working life, and crises, as well as company sports activities and preventive health programs, and 30 days of vacation
• Individual support and training opportunities for employees at the PYUR Training Academy
• Corporate benefits at well-known companies through perks portals, with attractive offers from strong partners, brands, and events, as well as a subsidy for PYUR products
• Good public transport connections and free parking for employees
• Team spirit and an open environment where ideas, potential, and strengths can be put to best use, an internal informal culture, and sustainability initiatives such as climate protection