(Senior) Security Platform Engineer (m/f/d)

Location: 51149 Köln | Contract Type: Full-/Part-time, permanent | Job-ID: 978007

Your Home of IT: REWE digital

We are the home for everyone active in the digital world. A tech team in which IT and non-IT specialists from a wide variety of areas work together. Together, we bring innovations to life – for retail and the everyday lives of millions of people.

In the Security Operations Center (SOC), we develop and operate the central security platform of the REWE Group. With modern technologies, intelligent automation, and a strong team, we create the foundation to detect cyber threats early, handle security incidents efficiently, and continuously protect our IT landscape.

As a (Senior) Security Platform Engineer, you will actively help shape our security platform. You will further develop our tool landscape, integrate new technologies, and work closely with Security Operations, Infrastructure, and Information Security to sustainably strengthen our cyber defense.

Tasks that will advance you:

• You develop, operate, and optimize our security platform as well as the deployed SOC tools and ensure stable, secure operation.
• Together with our security analysts, you develop detection use cases and automations to continuously expand our capabilities for detecting and responding to cyber threats.
• You integrate new data sources and systems into our security platform, thereby increasing transparency across our IT landscape.
• You plan and accompany the introduction of new security solutions – from requirements gathering and testing to productive operation.
• You evaluate new technologies regarding their added value and support the strategic further development of our security platform.
• You work closely with infrastructure teams, Information Security, and colleagues from the REWE Group to jointly develop secure and future-proof solutions.
• You ensure traceable documentation, support audits, and continuously develop processes and standards.
• You contribute your own ideas and actively shape the further development of our platform and our collaboration.

Features that define you:

• You have several years of professional experience in security engineering or in the environment of a Security Operations Center.
• You bring sound knowledge in handling SIEM, XDR, EDR, NDR, or PAM solutions.
• You have experience in the areas of network and cloud security and have ideally already built or further developed security platforms.
• You are familiar with frameworks and standards such as MITRE ATT&CK, NIST, or ISO 27001 and know how they are used in a SOC environment.
• You have experience with at least one scripting language (e.g., Python or PowerShell) and use automation to optimize security processes.
• Ideally, you have already worked with technologies such as Splunk, SentinelOne, CyberArk, or Proofpoint.
• Certifications such as CISSP, GIAC, or comparable qualifications are a plus.
• You work analytically, structured, and independently, enjoy contributing new ideas, and communicate confidently in English.
• As part of your activities, you are willing to undertake occasional business travel.

Basics that make life even better:

• Your Life-Work-Integration through flexible working hours, mobile working, 30 days of vacation + regional tradition days, time-out models (sabbatical, care leave, etc.), and company kindergarten.
• We invest in your future. With your annual training budget, you can learn regarding your individual skill development. So stay curious and collect knowledge on our own learning platform, the "IT Learning Hub".
• Updates for you through in-house workshops and events, such as the hackathon and Tech Talks, as well as weekly stand-ups, regular Tech All-Hands, and open door formats.
• Your Impact, because you develop applications and services for millions of people - with over 1 billion datasets daily, on over 6 million mobile phones, 32,000 cash registers, or in 7,300 markets.
• Your relaxed commute with the discounted Deutschlandticket, a company bike, and parking spaces directly in front of the door.
• Our networks such as di.to. - different together, SHINE, f.ernetzt, WomEngineers @REWE digital, as well as Women's Drive make us a diverse community and support you in your personal development.
• Benefits of a corporation for you, e.g., in the form of discounts at REWE, PENNY, toom Baumarkt, and the DERTOUR Group, comprehensive care through extensive health services, support for your retirement provision in the form of capital-forming benefits and the REWE Pensionskasse, special benefits such as vacation and Christmas bonuses, and much more.

You can find further information at jobs.rewe-group.com.

Do you have any questions about your online application or our application process? Then take a look at our FAQ.

We expressly emphasize that all people are equally welcome with us - regardless of gender/gender identity, ethnic origin and nationality, social origin, religion/belief, physical and mental abilities, age, as well as sexual orientation or other individual characteristics.