Erste Digital GmbH
SOC SIEM Platform Engineer - SIEM as Code (all humans)
Als SOC SIEM Platform Engineer bei der Erste Digital GmbH in Wien entwickelst und betreibst du eine zentrale SIEM-Plattform für die Cyber Defense Center der Erste Group. Der Fokus liegt auf SIEM as Code, Automatisierung und Skalierung über mehrere Länder und Entitäten hinweg.
Free. Atlas tailors your CV to exactly this role and keeps finding matching jobs for you.
Apply without optimisationThe Atlas advantage
- CV and cover letter written for exactly this role, not copied from a template.
- Match score with reasons Atlas shows you how well the role fits you and tells you honestly what fits and what doesn't.
- Everything in view tracking shows you where every application stands, from sending it to the interview.
Job description
Make a difference in the financial life of millions of people: At Erste Digital you are co-creating the digital future, in which better financial health is possible. #believeinyourself
We are part of Erste Group – the largest banking group in Central and Eastern Europe with more than 2,500 branches and over 45,000 employees. Our more than 2,000 IT experts and enthusiasts are the bank's Digital Muscle.
Build the platform that enables security operations across countries
Our Cyber Defense Center protects the digital services used by millions of customers across Erste Group.
We are looking for a SOC SIEM Platform Engineer who combines security knowledge with a strong platform engineering and automation mindset. You will help us build and operate a modern SIEM platform used across multiple countries and entities within Erste Group. Your responsibility goes beyond keeping the platform running: you will continuously improve how it is deployed, configured, monitored and operated.
Our guiding principle is simple: Everything that can reasonably be managed as code should be managed as code.
Your mission is to develop our SIEM toward a scalable SIEM as Code/SOC as Code operating model - making security operations more automated, consistent and repeatable across an international environment.
What to do:
- Build, expand and operate our central SIEM platform across multiple countries and entities
- Design scalable architecture for ingesting, processing and normalizing security telemetry
- Implement SIEM as Code using version control, Infrastructure as Code, automated pipelines and testing
- Automate log source onboarding and build integrations across cloud, on-premises, SaaS and security platforms
- Ensure platform reliability and observability by monitoring and troubleshooting data pipelines, performance and availability
- Enable secure multi-tenancy while balancing shared Group capabilities with country and entity requirements
- Collaborate with Detection Engineering, SOC and automation teams to continuously simplify, standardize and improve the platform