Senior SIEM/SOC Engineer (m/f/d)

Our brand Deutsche Telekom IT Solutions Slovakia entered the life of Košice region in 2006 under the name of T-Systems Slovakia and ever since has been inextricably linked with the region when became one of the founding members of Košice IT Valley. We have managed to grow from scratch to the second largest employer in the eastern part of the country with more than 3900 employees. Our goal is to proactively find new ways to improve and continuously transform into the type of company providing innovative information and communication technology services.

Join the team at Operational Services GmbH, within Deutsche Telekom Systems Solutions Slovakia, providing opportunities for IT infrastructure experts in Slovakia. OS is one of the leading ICT service providers in the German market and acts as a key driver of digitalization for medium-sized companies. With nearly 1,000 highly qualified specialists, OS designs, operates, and supports modern IT systems, ensures long-term service continuity, and maintains the availability of critical business processes.

In addition, Candidate must be EU nationals ( due to sovereign customer environments) and should meet at least one of the following criteria:

Please note that, due to customer-specific requirements, the selected candidate will be asked to present an extract from the Criminal Register for inspection only.

Responsibilities

Development of use cases and detection rules.; Assisting in the conception and design of detection strategies.; Collaboration with the SOC for use case validation and acceptance.; Refinement and optimization of existing detection rules.; Creating dashboards and reports for customers or the internal SOC.; Contributing to internal knowledge sharing and process development.

Requirements

2–5 years of professional experience in SIEM/SOC, IT security, or threat detection.; Familiarity with frameworks like MITRE ATT&CK, Cyber Kill Chain, and IOC-based detection.; Knowledge of log data analysis, attack detection, SIEM, or security monitoring.; Proficiency in at least one scripting, query, or programming language (e.g., Python, PowerShell, KQL, Lucene).; Ideally, experience in developing detection use cases in Elastic SIEM, Palo Alto XSIAM, or comparable systems.; Analytical thinking and problem-solving skills.; Self-organization and a disciplined approach to documentation.; Very good written and spoken English skills; 2+ years of Palo Alto XSIAM experience, or; 4+ years of Elastic experience, or; German language skills