The Team:

Our Global information security organization is responsible for security and trust. We think security-offensively and defensively. We continuously monitor our global security posture and are always adapting to the ever changing threat landscape. 

The Role:

At each and every Celonis office, we get things done quickly by cultivating an open-minded culture with creative, collaborative, autonomous teams in which the best ideas win. As a Detection Engineer, you will be a trusted engineer in the Celonis Information Security organization and you will have the opportunity to will work with teams within Celonis’ Security program to maximize Splunk value and effectiveness and act as the primary owner of the platform

The work you’ll do:

• You will work with teams within Celonis’ Security program to maximize the Threat Detection capability and the Splunk value and effectiveness
• You will support, maintain, and expand Splunk infrastructure in a highly resilient configuration and will recommend improvements to existing Splunk environments
• You will help standardise Splunk agent deployment, configuration and maintenance across a variety of on-premise and cloud environments
• You have experience building and maintaining production-quality dashboards to provide visibility into the security posture in a multi-tenant environment
• You can create a risk-based alerting environment that focuses on refining alerting to be more effective and actionable
• You will monitor the agent and server infrastructure for capacity planning and optimization, with an eye on scalability and the rapid ingestion of new log sources

The qualifications you need:

• Experience working with Splunk, ideally certified to Admin level
• An ability to develop queries and enable detection of threats
• Experience in search query languages such as SPL (Splunk)
• A broad understanding of security concepts; an interest and passion for cyber security