{"id":1706943,"url":"https://alion.io/job/s-pro-detection-engineer-german-speaking","title":"Detection Engineer (German-speaking)","company":{"id":692134,"name":"S-PRO -","domain":"s-pro.io","url":"https://alion.io/company/s-pro-3","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Recruitee","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["DE"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":72000,"max_usd":168000,"period":"year","method":"role_country_seniority_unknown","sample_n":51},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-02T09:50:53Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-05T00:25:55Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"S-PRO is a software development and IT consulting partner. We develop unique products tailored to the client’s needs to accelerate business. Our typical engagement is consultancy, discovery, build, and maintenance, with clients from fintech, healthcare, energy and other industries.\nWe are looking for an experienced SIEM/SOAR and detection engineering freelancer to help further develop our existing SIEM setup.\nRequirements\nResponsibilities:\nReview and critical evaluation of the existing Sekoia/SIEM setup\n\nAnalysis of connected data sources and identification and resolution of relevant gaps\n\nAnalysis of existing detection rules, use cases, and cases\n\nEstablishment of a baseline for case volume, processing effort, and false positive rate at the start of the project\n\nIdentification of causes for high manual analysis effort\n\nImprovement of detection logic, prioritization, and case quality\n\nDesign and implementation of additional data enrichment\n\nIdentification and implementation of meaningful integrations\n\nDevelopment or further development\n\nRequirements:\nSubstantial hands-on experience with SIEM and detection engineering\n\nExperience with SOC processes and incident triage\n\nExperience with SOAR and security automation\n\nStrong knowledge of various security data sources and integrations, particularly identity, cloud (AWS), and SaaS\n\nDetection engineering based on MITRE ATT&CK\n\nExperience with versioned, traceable maintenance of detections (Detection-as-Code is a plus)\n\nExperience with Sekoia\n\nHands-on mindset and ability to work independently\n\nAbility to critically analyze existing setups and implement pragmatic improvements\n\nWillingness and ability to actively share knowledge\n\nFluent in German.\n\nWhat we offer:\nLong team focus: we create an environment of transparent communication, and minimal bureaucracy, which leads to long-term relationships.\n\nDevelopment of niche expertise: we are working in several niches, such as FinTech, healthcare, and logistics. Therefore, our employees can develop their own expertise in these domains.\n\nContinuous learning: we create employee development plans / personal roadmaps /quick promotion processes.\n\nInternal career development: 80% of our current executives were promoted to those positions within S-PRO. We encourage initiative. If a person wants to set new challenges and grow, we will definitely support them.\n\nBenefits and perks:\nFlexible schedule.\n\nRemote work model.\n\nMedical insurance\n\nPaid vacations\n\nPaid Sick-leaves.\n\nPaid State holidays.\n\nBy submitting your application for this position, you consent to the processing of your personal data for recruitment purposes in accordance with applicable data protection laws. Detailed information regarding the processing of personal data can be found at the following link: Сandidate Privacy","description_format":"text","description_chars":2810,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"German","level":"Advanced (C1)","optional":false}]},"benefits":["Continuous learning","Flexible schedule","Health insurance"],"hiring_locations":[{"name":"Germany","iso":"DE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Software & Embedded Finance","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-02T15:11:21Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":26,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-04T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/s-pro-detection-engineer-german-speaking","json_url":"https://alion.io/job/s-pro-detection-engineer-german-speaking.json","meta":{"generated_at":"2026-10-05T01:59:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2652,"day_limit":5000,"remaining_today":2348,"minute_limit":60,"resets_at":"2026-10-06T00:00:00Z"}}}