Cybersecurity Architect

In Cyclad we work with top international IT companies to support them in delivering cutting edge technologies. We focus on projects involving modern security architectures and Security Operations Centers (SOC).

• Fluency in both German and English
• Strong knowledge of cybersecurity architectures, especially SOC and SIEM
• Experience with Splunk (administration, configuration, app development, data modeling)
• Log management and parsing, including integration and normalization of multiple log sources
• Cloud security expertise, particularly AWS (IAM, Security Groups, logging, monitoring)
• Knowledge of security standards and frameworks (ISO 27001, NIST, MITRE ATT&CK)
• Experience in incident detection and response
• Scripting and automation skills (Python, Bash; Terraform for IaC is a plus)
• Understanding of network and application security
• Strong analytical skills and experience working with large datasets
• Very good communication and documentation skills

Nice to have:

• Experience with Threat Intelligence and SOAR platforms
• Knowledge of container security (Docker, Kubernetes)
• Relevant certifications such as CISSP, AWS Security Specialty, or Splunk Certified Architect

• Design and implementation of a SIEM architecture based on Splunk
• Integration and connection of various log sources (e.g., firewalls, IDS/IPS, cloud services, applications)
• Development and maintenance of use cases, dashboards, and alerting mechanisms
• Ensuring scalability and performance of the SIEM system
• Collaboration with SOC analysts and Incident Response teams
• Implementation of security policies and compliance requirements
• Operation and optimization of the backend in an AWS cloud environment