Security Monitoring Engineer

About the role

As a Security Monitoring Engineer you will build and operate a centralized security monitoring and incident detection capability for Bosal Group’s global IT landscape. You will design a SIEM platform from the ground up and ensure it delivers effective detection and response.

Key responsibilities

• Design, implement and operate a SIEM platform (e.g., Microsoft Sentinel or equivalent).
• Onboard and normalize logs from Palo Alto firewalls, Prisma Access, Cisco switches, WLCs, ISE, Catalyst Center, Windows and Linux servers, Microsoft 365 and other SaaS applications.
• Define, prioritize and maintain detection use cases aligned with asset criticality and risk.
• Develop and maintain detection rules, incident response workflows and playbooks.
• Correlate incidents with vulnerability and exposure data and support TISAX evidence.
• Continuously improve detection coverage, reduce false positives and keep the solution audit‑ready.

Required profile

• 4+ years of experience in security operations or SOC‑related roles.
• Proven experience building or significantly extending SIEM platforms.
• Hands‑on experience in heterogeneous environments (network, servers, cloud).
• Familiarity with incident response processes and an entrepreneurial mindset.

Required skills

• SIEM platforms such as Microsoft Sentinel, Splunk or similar.
• Log ingestion and parsing (syslog, APIs).
• Windows and Linux logging.
• Network and firewall logging concepts.
• Palo Alto firewalls, Prisma Access.
• Cisco switches, WLCs, ISE, Catalyst Center.
• Microsoft 365 and identity services.

What we offer

• Inspiring work environment within a global Tier‑1 automotive supplier.
• Competitive remuneration package with additional benefits.