SIEM & Security Consultant (SOC)

Quick Facts

• Role: Customer-facing SIEM & Security Consultant within a SOC team

• Focus: Advanced incident response, forensics, threat hunting, and detection engineering

• Work model: Flexible; typically ~2 days home office per week after onboarding (agreement possible for ~3)

Description

You will work on specific SOC tasks and projects, including incident investigation, forensic and malware analysis, and the creation and tuning of detection rules. The role is strongly customer-oriented, with regular collaboration and support for SOC onboarding and technical development of SOC capabilities.

Responsibilities

• Respond to security incidents and perform intrusion analysis, impact assessment, and next-step recommendations

• Conduct forensic and malware analyses; review suspicious media and leverage scripting when needed (VBA, PowerShell, Python)

• Perform threat hunting and create new detection rules using YARA and Sigma

• Prepare and fine-tune customer SOC onboarding, including detection logic

• Collaborate in Red Team / Purple Team activities

• Work with customers and contribute to the evolution of security services

Requirements

• Advanced experience with Incident Response and attack investigation

• Strong knowledge of Windows and Linux

• Familiarity with MITRE ATT&CK, Cyber Kill Chain, NIST 800-61, ISO 27001 concepts

• Knowledge of YARA and Sigma rules

• Experience with SIEM platforms (e.g., QRadar, Splunk, Elastic, ArcSight or similar)

• Experience in security monitoring/SOC operations (at least 2 years)

• Communication and consulting skills

• English at least at the level required to read documentation

Benefits

• Work with modern security tools on meaningful projects

• Support for education and certifications

• Informal environment and flexible working hours (typically ~2 days HO per week after training; possible agreement for ~3)

• 5 weeks of vacation, Sick Days

• Pension contribution, Multisport, meal allowance, and office refreshments