SOC SIEM Platform Engineer – SIEM as Code

About the role

Join Erste Digital’s Cyber Defense Center to build and operate a modern, code‑driven SIEM platform that supports security operations across multiple countries. You will help shape a scalable, automated, and repeatable SIEM as Code model for a major European banking group.

Key responsibilities

• Design and expand a central SIEM platform, ensuring multi‑tenant support and compliance with country‑specific requirements.
• Implement SIEM as Code using version control, IaC, CI/CD pipelines and automated testing.
• Automate log source onboarding across cloud, on‑premises, SaaS and security tools.
• Monitor and troubleshoot data pipelines, performance and availability to guarantee platform reliability.
• Collaborate with detection engineering, SOC and automation teams to continuously improve the platform.

Required profile

• Hands‑on experience with SIEM, security analytics or large‑scale logging platforms.
• Strong understanding of security telemetry pipelines, including collection, parsing, normalization and data models.
• Experience with Infrastructure/Configuration as Code, Git, CI/CD and automated deployments.
• Practical scripting or programming skills and experience with APIs and system integrations.
• Professional fluency in English.

Required skills

• SIEM platforms
• Infrastructure as Code (IaC)
• Git and CI/CD pipelines
• Scripting / programming (e.g., Python, Bash)
• API integration
• Cloud infrastructure, access controls and secrets management

What we offer

• Real platform ownership with the chance to shape a core security service for a large banking group.
• Automation‑first environment with configuration‑as‑code, reusable components and observability.
• Opportunities to work across countries, entities and technologies at scale.
• Access to employee benefits, referral program and a competitive performance‑related salary.