> Markdown version of [/jobs/ext/2856586-platform-engineer-monitoring-observability-siem-monso](https://www.wearedevelopers.com/jobs/ext/2856586-platform-engineer-monitoring-observability-siem-monso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Platform Engineer - Monitoring, Observability & SIEM (MONSO) - **Company:** Joh. Berenberg, Gossler & Co. KG - **Location:** London, UK - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Data Analysis, Bash Shell, Cloud Computing, Code Review, Cyber Security, Continuous Integration, Data Centers, Linux, DevOps, Domain Name System (DNS), Github, Python (Programming Language), Network Security, NetFlow, Networking Basics, Red Hat Enterprise Linux, Prometheus, Security Information and Event Management, Simple Network Management Protocols, Syslog, Systems Integration, TCP/IP, Transport Layer Security, Load Balancing, Computer Network Technologies, Data Ingestion, Delivery Pipeline, Grafana, Kubernetes Helm Charts, Firewalls (Computer Science), Gitlab-ci, Kubernetes, SolarWinds (Software), Splunk, Cisco - **Published:** September 12, 2026 - **Apply:** https://berenberg.avature.net/de_DE/careers/Login?jobId=2986 ## About the Role * Self-Starter & DevOps Mindset: Proactive problem solver who champions automation-first, CI/CD pipelines, code reviews, and self-service enablement. * Modern Observability & Telemetry: Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and also configuring OpenTelemetry collectors and pipelines; knowledge of Prometheus and Grafana or similar tools. * Kubernetes (Power User): Strong, hands-on experience deploying and operating workloads, stateful appli-cations, Helm charts, and manifests on K8s (cluster administration is managed by a dedicated team). * Good Networking Knowledge: Firm grasp of networking fundamentals (TCP/IP, DNS, TLS, load balancing, firewalls) and network telemetry (NetFlow/IPFIX, SNMP, syslog). * Scripting & Automation: Strong proficiency in Python and Linux/Bash scripting to build integrations, CLI tools, and automated pipelines. * Linux: Confident with enterprise Linux administration, troubleshooting, and system performance. Desirable: * Splunk administration, Splunk on Kubernetes (Splunk Operator), Enterprise Security (ES), or ITSI. * Familiarity with network security/XDR tooling (Cisco Secure Network Analytics / Stealthwatch, Cisco XDR, Rapid7). * Experience with CI/CD tooling (GitLab CI, GitHub Actions) and GitOps practices. * Exposure to automated or AI-assisted SIEM detection engineering and SOAR concepts. * Incident and Capacity Management understanding. ## Description Vereinigtes Königreich Stadt London Art der Anstellung Professional Arbeitszeit Vollzeit Vertragsart Unbefristet Offene Stellen 1 Beschreibung & Anforderungen For our SPEAR Technology (Security, Platform Engineering, Automation and Runtime) division in London we are looking to hire a: Platform Engineer - Monitoring, Observability & SIEM (MONSO) Do you: Like solving puzzles with an inquisitive mind? Think outside the box and challenge the status quo? Prefer simplicity over complexity and automation over manual effort? Have a self-starter mindset with a drive to take proactive ownership? Then consider joining Berenberg's SPEAR Technology programme. SPEAR consists of our CyberSecurity team and several platform engineering teams responsible for Monitoring, Observability, Kubernetes, Developer Platform, Network, and Datacentre Infrastructure. Due to each team's compact size, all team members are subject matter experts offering an excellent environment to learn continuously, share unique skills, and make a noticeable, impactful contribution across the bank. Your role in the team The MONSO (Monitoring and Security Operations) platform team is evolving towards a modern platform engineering and self-service model. Rather than handling manual operational requests, our focus is building "as-code" platforms and automations that enable other teams to do more themselves-such as empower-ing our SOC/CyberSec team to develop (including AI-assisted workflows), test, and deploy SIEM use cases independently via CI/CD. The platform spans Splunk Enterprise on-prem (running on Kubernetes), Splunk Observability Cloud, and SolarWinds, with future expansion into Cisco Secure Network Analytics, Cisco XDR, and Rapid7. What will you do? * Build and maintain our monitoring, observability, and SIEM tooling using modern platform engineering practices (Infrastructure/Configuration as Code). * Deploy, scale, and automate platform workloads (including Splunk and custom automations) on our internal Kubernetes platform. * Develop pipelines and self-service automations that allow the CyberSec/SOC team and developers to onboard data and deploy detection use cases autonomously. * Ensure robust integration across hybrid infrastructure, log pipelines, and network telemetry. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Monoskope: Developer Self-Service Across Clusters](https://www.wearedevelopers.com/videos/329-monoskope-developer-self-service-across-clusters) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)