Platform Engineer - Monitoring, Observability & SIEM (MONSO)

Vereinigtes Königreich Stadt London Art der Anstellung Professional Arbeitszeit Vollzeit Vertragsart Unbefristet Offene Stellen 1Beschreibung & Anforderungen For our SPEAR Technology (Security, Platform Engineering, Automation and Runtime) division in London we are looking to hire a: Platform Engineer - Monitoring, Observability & SIEM (MONSO) Do you: Like solving puzzles with an inquisitive mind?

Think outside the box and challenge the status quo?

Prefer simplicity over complexity and automation over manual effort?

Have a self-starter mindset with a drive to take proactive ownership?

Then consider joining Berenberg's SPEAR Technology programme.

SPEAR consists of our Cyber Security team and several platform engineering teams responsible for Monitoring, Observability, Kubernetes, Developer Platform, Network, and Datacentre Infrastructure.

Due to each team's compact size, all team members are subject matter experts offering an excellent environment to learn continuously, share unique skills, and make a noticeable, impactful contribution across the bank.

Your role in the team The MONSO (Monitoring and Security Operations) platform team is evolving towards a modern platform engineering and self-service model.

Rather than handling manual operational requests, our focus is building "as-code" platforms and automations that enable other teams to do more themselves-such as empower‑ing our SOC/Cyber Sec team to develop (including AI-assisted workflows), test, and deploy SIEM use cases independently via CI/CD.

The platform spans Splunk Enterprise on‑prem (running on Kubernetes), Splunk Observability Cloud, and Solar Winds, with future expansion into Cisco Secure Network Analytics, Cisco XDR, and Rapid7.

• Build and maintain our monitoring, observability, and SIEM tooling using modern platform engineering practices (Infrastructure/Configuration as Code).
• Deploy, scale, and automate platform workloads (including Splunk and custom automations) on our internal Kubernetes platform.
• Develop pipelines and self-service automations that allow the Cyber Sec/SOC team and developers to onboard data and deploy detection use cases autonomously.
• Ensure robust integration across hybrid infrastructure, log pipelines, and network telemetry.
• Self-Starter & Dev

Ops Mindset: Proactive problem solver who champions automation-first, CI/CD pipelines, code reviews, and self-service enablement.

• Modern Observability & Telemetry: Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and also configuring Open Telemetry collectors and pipelines; knowledge of Prometheus and Grafana or similar tools.
• Kubernetes (Power User): Strong, hands‑on experience deploying and operating workloads, stateful appli‑cations, Helm charts, and manifests on K8s (cluster administration is managed by a dedicated team).
• Good Networking Knowledge: Firm grasp of networking fundamentals (TCP/IP, DNS, TLS, load balancing, firewalls) and network telemetry (Net Flow/IPFIX, SNMP, syslog).
• Scripting & Automation: Strong proficiency in Python and Linux/Bash scripting to build integrations, CLI tools, and automated pipelines.
• Linux: Confident with enterprise Linux administration, troubleshooting, and system performance.

Desirable

• Splunk administration, Splunk on Kubernetes (Splunk Operator), Enterprise Security (ES), or ITSI.
• Familiarity with network security/XDR tooling (Cisco Secure Network Analytics / Stealthwatch, Cisco XDR, Rapid7).
• Experience with CI/CD tooling (Git Lab CI, Git Hub Actions) and Git Ops practices.
• Exposure to automated or AI-assisted SIEM detection engineering and SOAR concepts.
• Incident and Capacity Management understanding.

We are a leading European private bank, with over 430 years of experience and deep rooted history, but we are still shaping and heavily investing in our future.

Our progress and evolution are driven by our people.

We encourage them to try new approaches, voice their opinions and achieve success in their own way.

We provide opportunities for them to develop their talents, explore different career paths and achieve their full potential.

We're an ambitious, forward‑looking business, backed by centuries of tradition and built on innovation.

You'll find a culture that encourages people to think independently, act entrepreneurially and challenge the status quo.

We place great importance on working on site, as we believe that being together in the office not only fosters creativity and efficiency, but also strengthens networks and builds trusting, collegial relationships.

For us, this forms the foundation for productive and successful work.

Together we collaborate to shape our business and fulfil our ambitious goals.

We welcome you to join us in our commitment to always do the right thing for our people, clients and our business - Our future is where you take us!

We will only accept applications submitted through our online application management system on the website.

Berenberg is an Equal Opportunities Employer and prides itself on being a modern, dynamic and internationally orientated organisation.

We value the rich diversity, skills and abilities and creative potential that people from differing backgrounds and experiences bring to the workplace.

Every employee plays a vital role in providing quality service to all our customers and helping to create and inclusive working environment, where everyone can realise their full potential.

We're committed to finding reasonable accommodations for candidates who require adjustments during our recruiting process.

Please contact us directly on to discuss.

• Private pension plan - 10% of base salary contribution by Berenberg
• Generous 30 day holiday allowance
• Private Health Insurance
• Life Insurance scheme
• Flexible working hours
• Enhanced parental leave policies
• Employee Assistance Programme offering counselling sessions related to mental health, financial wellbeing and other topics
• #J-18808-Ljbffr