Staff Detection & Response Security Engineer (SIEM)

JTL-Software GmbH; United States; Remote; USD 135,000 - 203,000; Full time

Benefits offered by this job

Meal allowance

Home office setup

Wellpass

JobRad

Pension plan

Capital-forming payments

Team events

Job summary

JTL-Software GmbH is expanding its security team with a Staff-level role responsible for owning the SIEM, developing detection content, and leading incident response. You will influence tooling, architecture, and standards while working closely with external partners.

This is a senior, IC role reporting to the Director Cybersecurity & IT. Key tasks include onboarding data sources, tuning detections, incident response leadership, and rolling out hardening baselines across endpoints and cloud.

Qualifications

• Built or substantially rebuilt a detection capability.
• Written and tuned production SIEM detections and fluent in its query language.
• Investigated security incidents from start to finish.
• Designed and rolled out a hardening baseline.
• Scripting for automation with PowerShell or Python.
• Set technical standards followed by others without formal authority.
• Fluent English, written and spoken.

Responsibilities

• Own the SIEM platform from implementation partner to production-ready state.
• Develop detection content and ensure coverage against relevant techniques.
• Lead end-to-end incident investigations and proactive threat hunting.
• Design and roll out security baselines across endpoints, servers, identity, and cloud.
• Manage external security partners and decide on tooling and cost implications.

Skills

Detection capability build

Detection content tuning

Incident response

Hardening baseline

Automation scripting

Influence without authority

Fluent English

Tools

PowerShell

Python

Job description

JTL-Software GmbH is expanding its security team with a Staff-level role responsible for owning the SIEM, developing detection content, and leading incident response. You will influence tooling, architecture, and standards while working closely with external partners.

This is a senior, IC role reporting to the Director Cybersecurity & IT. Key tasks include onboarding data sources, tuning detections, incident response leadership, and rolling out hardening baselines across endpoints and cloud.