Senior Detection Engineer - SIEM/SOAR (Remote, Flexible)

Openkrill; United States; Remote; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible schedule

Remote work model

Medical insurance

Paid vacations

Paid Sick-leaves

Paid State holidays

Job summary

S-PRO is seeking an experienced SIEM/SOAR and detection engineering specialist to enhance our existing SIEM setup. You will review current configurations, analyze data sources, and improve detection logic across cloud, identity, and SaaS integrations.

The role requires hands-on engineering, SOC process familiarity, and fluency in German, with remote work options and a focus on long-term client engagements.

Qualifications

• Substantial hands-on experience with SIEM and detection engineering.
• Experience with SOC processes and incident triage.
• Experience with SOAR and security automation.
• Strong knowledge of identity, cloud (AWS), and SaaS data sources and integrations.
• Detection engineering based on MITRE ATT&CK.
• Experience with versioned, traceable maintenance of detections (Detection-as-Code is a plus).
• Hands-on mindset and ability to work independently, share knowledge, and improve setups.
• Fluent in German.

Responsibilities

• Review and critical evaluation of the existing SIEM setup.
• Analysis of connected data sources and identification and resolution of relevant gaps.
• Analysis of existing detection rules, use cases, and cases.
• Establishment of a baseline for case volume, processing effort, and false positive rate at the start of the project.
• Identification of causes for high manual analysis effort.
• Improvement of detection logic, prioritization, and case quality.
• Design and implementation of additional data enrichment.
• Identification and implementation of meaningful integrations.
• Development or further development.

Skills

SIEM

SOAR

SOC processes

MITRE ATT&CK

Detection engineering

Sekoia

German language

Integrations

Tools

Sekoia platform

Detection-as-Code

Job description

S-PRO is seeking an experienced SIEM/SOAR and detection engineering specialist to enhance our existing SIEM setup. You will review current configurations, analyze data sources, and improve detection logic across cloud, identity, and SaaS integrations.

The role requires hands-on engineering, SOC process familiarity, and fluency in German, with remote work options and a focus on long-term client engagements.