SOC SIEM Platform Engineer - SIEM as Code (all humans)

Make a difference in the financial life of millions of people: At Erste Digital you are co-creating the digital future, in which better financial health is possible. #believeinyourself

Our Cyber Defense Center protects the digital services used by millions of customers across Erste Group.

We are looking for a SOC SIEM Platform Engineer who combines security knowledge with a strong platform engineering and automation mindset. You will help us build and operate a modern SIEM platform used across multiple countries and entities within Erste Group. Your responsibility goes beyond keeping the platform running: you will continuously improve how it is deployed, configured, monitored and operated.

Our guiding principle is simple: Everything that can reasonably be managed as code should be managed as code.

Your mission is to develop our SIEM toward a scalable SIEM as Code/SOC as Code operating model - making security operations more automated, consistent and repeatable across an international environment.

• Build, expand and operate our central SIEM platform across multiple countries and entities

• Design scalable architecture for ingesting, processing and normalizing security telemetry

• Implement SIEM as Code using version control, Infrastructure as Code, automated pipelines and testing

• Automate log source onboarding and build integrations across cloud, on-premises, SaaS and security platforms

• Ensure platform reliability and observability by monitoring and troubleshooting data pipelines, performance and availability

• Enable secure multi-tenancy while balancing shared Group capabilities with country and entity requirements

• Collaborate with Detection Engineering, SOC and automation teams to continuously simplify, standardize and improve the platform

• Hands-on experience engineering or operating SIEM, security analytics or large-scale logging platforms

• Strong understanding of security telemetry pipelines, including collection, parsing, normalization and data models

• Experience with Infrastructure/Configuration as Code, Git, CI/CD and automated deployments

• Practical scripting or programming skills and experience with APIs and system integrations

• Familiarity with cloud infrastructure, access controls and secrets management

• Strong operational mindset with the ability to troubleshoot complex systems and build for reliability and observability

• Professional fluency in English

• Nice to have: Experience with cloud, container and telemetry technologies, detection engineering, multi-tenant environments or related DevOps/security disciplines. Relevant certifications and German language skills are also welcome.

Not sure you meet every qualification? We still encourage you to apply. We are interested in your capabilities, engineering mindset and what you can build - not in matching every keyword.

Erste Group considers the diversity of its employees as key to innovation and success. As employer we are proud to offer everyone equal chances, irrespective of age, skin colour, religious belief, gender, sexual orientation or origin.