Detection Engineer — SIEM & SOC (m/f/d)

Full-time · Remote / Berlin

As a Detection Engineer (m/f/d) you assess and build detection logic across common SIEMs and help shape the methodology behind GrayCheck — from the single rule to measuring effectiveness.

SIEMDetection RulesMITRE ATT&CKSOC

Apply now →

Your tasks

Assess the detection effectiveness of SIEM environments — vendor-neutral
Design, improve and test detection rules and use cases
Map detection to MITRE ATT&CK and identify blind spots
Help shape the GrayCheck methodology and its assessment criteria
Collaborate with offensive security to validate detection

What you bring

Experience as a detection engineer, SOC analyst or in a comparable role
Hands-on with at least one common SIEM (e.g. Splunk, Sentinel, Elastic, QRadar)
Good understanding of log sources, correlation and alerting
Familiarity with MITRE ATT&CK and common attack patterns
Analytical, structured way of working
Excellent German and English

What we offer

Real freedom to shape things and genuine ownership in a growing team
Work on vendor-neutral, evidence-based solutions with tangible impact
Flexible hours and a remote option, with a Berlin base
Room for development and certifications
Attractive compensation

We’re looking forward to meeting you!

If you want to make sure detection actually works — instead of just collecting logs — we’d love your application at careers@graydaxe.com. Help shape the future of cybersecurity! Your Graydaxe team

Apply now →

Privacy note: By submitting your application you agree that we process your personal data in line with our privacy policy. The data is used solely to handle your application and is deleted afterwards unless legal retention periods apply.