THE ROLE & THE TEAM
As a Principal Security Operations Engineer, you will lead the development and automation of tooling within our security operations team to enhance our detection capabilities and response efficiency. You will be responsible for building automation into processes, creating custom use cases and improving upon current automation workflows within the Security Operations Engineering team. You will be a key player in our organization's efforts to proactively identify and respond to security threats and incidents.
INCLUSIVE BY DESIGN
At Zalando, our vision is to be inclusive by design. And this vision starts with our hiring - we do not discriminate on the basis of gender identity, sexual orientation, personal expression, ethnicity, religious belief, or disability status. You are welcome to leave out your picture, age, or marital status from your application. We only assess candidates on their qualifications and merit.
We want to provide you with a great candidate experience. Feel free to inform us of any accommodations you may need, so we can best support you throughout the hiring process.
do.BETTER - our diversity & inclusion strategy: https://corporate.zalando.com/en/our-impact/dobetter-our-diversity-and-inclusion-strategy
Our employee resource groups: https://corporate.zalando.com/en/our-impact/our-employee-resource-groups
WHAT WE’D LOVE YOU TO DO (AND LOVE DOING)
You find yourself saying “Shift left”;
You design, develop, and maintain tools and scripts to automate security operations tasks, including log analysis, alert triage, and incident response;
You collaborate with the Security Incident Response team to develop playbooks and automated response workflows to accelerate incident resolution;
You have experience with use case management and are interested in detection engineering and response automation;
You manage supporting requirements quickly during high priority security incidents (such as a zero day vulnerability) and devise tangible solutions to put purpose first;
You are comfortable dealing with ambiguity and are capable of dealing with a rapidly changing hybrid cloud environment;
You contribute to improving the security posture of the organization, coordinating with other principal engineers;
You are a motivated self learner, and contribute to the technical enablement of the team.
WE'D LOVE TO MEET YOU IF…
You have strong automation/scripting skills (Go, Python, Javascript, Typescript) and are comfortable interacting with APIs via code;
You have a strong understanding of Information Security, with hands-on working experience in translating Information Security processes to technical implementations;
You have strong security, development and deployment experience with AWS;
You have working experience on SIEM/SOAR applications (e.g. Splunk, Qradar, Exabeam), log onboarding and parsing with regular expressions;
You have working experience on vulnerability scanning applications in both on premise and cloud environments (e.g. Tenable, Qualys, Trivy, Anchore, Clair, Acunetix, Burp Suite);
Working experience in GCP/Azure and with Kubernetes security topics would be a plus.
OUR OFFER
Zalando provides a range of benefits, here’s an overview of what you can expect. Ask your Talent Acquisition Partner to learn more about what we offer.
Employee shares program;
40% off fashion and beauty products sold and shipped by Zalando, 30% off Zalando Lounge, discounts from external partners;
2 paid volunteering days a year;
Hybrid working model with up to 60% remote per week, actual practice is up to each team to best support their collaboration;
Work from abroad for up to 30 working days a year;
27 days of vacation a year (for Zalando SE);
Relocation assistance available (subject to prior agreement);
Family services, including counseling and support;
Health and wellbeing options (including Gympass);
Mental health support and coaching available.
Learn all about Zalando and our values here: https://jobs.zalando.com/en/?gh_src=22377bdd1us