Cyber Security Engineer (SIEM)
Cybersecurity engineer on Amaris Consulting's Cyber Intelligence & Security Operations Center (CISOC) team, focused on security monitoring: building and tuning SIEM/XDR detection use cases (Microsoft Sentinel, Defender) in Azure, writing Python/PowerShell/Bash scripts and integrations, and maintaining simulated threats to test detections.
- Compensation
- Not disclosed
- Location
- Not listed
- Work setup
- Not specified
- Seniority
- Junior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 3-5 years of professional experience in Cybersecurity, ideally within Security Operations / Cyber Intelligence teams
- Hands-on experience with Microsoft Sentinel SIEM and Azure environments
- Experience designing and developing security use cases for SIEM/XDR technologies (Microsoft Sentinel, Microsoft Defender)
- Strong programming skills in scripting languages such as Python, PowerShell, and/or Bash, including API integrations
- Experience with reporting/ticketing platforms, preferably ServiceNow
- Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage
- Excellent spoken and written English (fluent level)
- Strong analytical thinking, problem-solving mindset, and results orientation
- Good communication skills and ability to work in virtual, international, and multicultural teams
- Agility and teamwork skills, with a proactive and collaborative attitude
Nice to have
- Certifications related to Microsoft Sentinel / Microsoft Defender
- Experience with Breach & Attack Simulation (BAS) tools and threat scenario creation
Full description
The role
Take your career to the next level with Amaris Consulting as a Cybersecurity Engineer (SIEM). Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide, and an agile environment by planning the kickoff and follow up on projects. Join Amaris Consulting, where you can develop your potential and make a difference within the company.
✍️ WHAT WOULD YOU NEED?
- 3-5 years of professional experience in Cybersecurity, ideally within Security Operations / Cyber Intelligence teams
- Demonstrated hands-on experience working with Microsoft Sentinel SIEM and Azure environments
- Proven experience designing and developing security use cases for SIEM/XDR technologies (e.g. Microsoft Sentinel, Microsoft Defender; certifications are a plus)
- Strong programming skills in scripting languages such as Python, PowerShell, and/or Bash, including API integrations
- Desired experience with Breach & Attack Simulation (BAS) tools and threat scenario creation
- Experience with reporting/ticketing platforms, preferably ServiceNow
- Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage
- Excellent spoken and written English (fluent level)
- Strong analytical thinking, problem-solving mindset, and results orientation
- Good communication skills and the ability to work in virtual, international, and multicultural teams
- Agility and teamwork skills, with a proactive and collaborative attitude
👉 WHAT WILL YOU DO? 👈
As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, you will focus on security monitoring and continuous improvement of detection capabilities:
- Implement new security use cases on SIEM/XDR platforms to enhance detection coverage
- Fine-tune existing use cases to reduce false positives and improve alert quality
- Develop new scripts and integrations to leverage and enrich SIEM/XDR technologies
- Maintain and optimize existing scripts, integrations, and automation workflows