What success looks like in this role:
We are seeking a skilled SIEM/SOAR Security Engineer to play a key role in strengthening our detection and response capabilities. In this hands-on position, you will take ownership of SIEM/SOAR platform support, log management, and incident response workflows, ensuring systems run efficiently and data is accurate.
This role offers the chance to work in a forward-thinking company, collaborate with senior engineers and SOC teams, and grow your career toward an architect-level position by taking on increasing responsibility and contributing to complex enterprise environments.
Key Responsibilities
- SIEM/SOAR Support: Configure, maintain, and troubleshoot SIEM/SOAR platforms, ensuring reliable log collection, threat detection, and automated response workflows.
- Log Management: Manage log ingestion pipelines (syslog, Windows Event Logs, Cribl) and apply filtering and parsing rules to optimize data for analysis.
- Incident Response: Investigate alerts, collect evidence, execute SOAR playbooks, and participate in post-incident reviews to improve detection and response.
- Technical Ownership: Collaborate with senior engineers to implement and validate configurations, dashboards, and detection rules, taking ownership of assigned workflows.
- Compliance & Documentation: Maintain audit trails, document configurations, incidents, and processes to ensure operational continuity and compliance.
- Escalation Point: Serve as a technical escalation for SIEM/SOAR-related issues and support the Unisys SOC team.
You will be successful in this role if you have:
- Proven experience in security operations, SIEM/SOAR platforms, or log management (approx. 5–7 years).
- Hands-on expertise with SIEM tools (e.g., Splunk, QRadar) and SOAR platforms.
- Experience managing log ingestion and parsing pipelines (syslog, Windows Event Logs, Cribl).
- Solid understanding of incident response processes, alert triage, and evidence collection.
- Strong troubleshooting and problem-solving skills, with attention to data integrity and system performance.
- Ability to document processes, incidents, and configurations clearly and thoroughly.
- Excellent communication and collaboration skills, with experience working independently and alongside SOC or engineering teams.
What do we offer?
- Hybrid working is supported
- Monthly gross 44.200 HUF cafeteria - regardless of your weekly working hours
- Fixed extra language allowance
- Additional shift bonuses
- Private Health Insurance - Premium Package provided for all Unisys associates after 6-months tenure
- Home office allowance
- Last and foremost, a great team, also a lot of learning and training opportunities
#LI-KB2