Detection Engineer (German-speaking)

S-Pro

23h•Remote

About The Position

S-PRO is a software development and IT consulting partner that develops unique, client-tailored products to accelerate business. Our typical engagement includes consultancy, discovery, build, and maintenance, serving clients across fintech, healthcare, energy, and other industries. We are seeking an experienced SIEM/SOAR and detection engineering freelancer to contribute to the further development of our existing SIEM setup.

Requirements

Substantial hands-on experience with SIEM and detection engineering
Experience with SOC processes and incident triage
Experience with SOAR and security automation
Strong knowledge of various security data sources and integrations, particularly identity, cloud (AWS), and SaaS
Detection engineering based on MITRE ATT&CK
Experience with versioned, traceable maintenance of detections (Detection-as-Code is a plus)
Experience with Sekoia
Hands-on mindset and ability to work independently
Ability to critically analyze existing setups and implement pragmatic improvements
Willingness and ability to actively share knowledge
Fluent in German

Nice To Haves

Detection-as-Code experience

Responsibilities

Review and critical evaluation of the existing Sekoia/SIEM setup
Analysis of connected data sources and identification and resolution of relevant gaps
Analysis of existing detection rules, use cases, and cases
Establishment of a baseline for case volume, processing effort, and false positive rate at the start of the project
Identification of causes for high manual analysis effort
Improvement of detection logic, prioritization, and case quality
Design and implementation of additional data enrichment
Identification and implementation of meaningful integrations
Development or further development of SIEM/SOAR capabilities