Cyber Security Architect

Overview

Location: 100% remote

As a Cybersecurity Architect, you are responsible for designing, implementing, and operating a modern security architecture for a Security Operations Center (SOC), with a focus on SIEM solutions. You ensure that threats can be detected early and effectively mitigated.

Responsibilities

• Design and implementation of a SIEM architecture based on Splunk.
• Connection and integration of various log sources (e.g., firewalls, IDS/IPS, cloud services, applications).
• Development and maintenance of use cases, dashboards, and alerting mechanisms.
• Ensuring scalability and performance of the SIEM system.
• Collaboration with SOC analysts and incident response teams.
• Implementation of security policies and compliance requirements.
• Operation and optimization of the backend in an AWS cloud environment.

Required Skills & Qualifications

• GERMAN LANGUAGE IS MUST. ENGLISH WILL NOT SUFFICE (MANDATORY REQUIREMENTS)
• Agreement to SU2 clearance due to the nature of the client
• Solid knowledge of cybersecurity architectures, especially SOC and SIEM.
• Experience with Splunk (administration, configuration, app development, data modeling).
• Log management and parsing: Ability to integrate and normalize various log sources.
• Cloud security expertise, particularly AWS (IAM, Security Groups, logging, monitoring).
• Knowledge of security standards and frameworks (ISO 27001, NIST, MITRE ATT&CK).
• Experience in incident detection & response.
• Scripting/automation (Python, Bash, and optionally Terraform for IaC).
• Understanding of network and application security.
• Analytical skills and experience working with large datasets.
• Strong communication and documentation skills.

Nice-to-have

• Experience with threat intelligence and SOAR platforms.
• Knowledge of container security (Docker, Kubernetes).
• Certifications such as CISSP, AWS Security Specialty, Splunk Certified Architect.

Offer

• Multisport Card
• Life insurance
• Private healthcare
• PowerYou platform