Infrastructure Support Specialist (SOC Platforms)

About the role

RTL, Europe's leading entertainment brand, is hiring an Infrastructure Support Specialist (m/f) in Luxembourg as part of its Information Security Services (ISS) team and the Global SOC team. The role covers the implementation, operation and optimisation of SOC infrastructure and security platforms, working with detection engineers, incident responders and threat intelligence analysts.

Key responsibilities

• Deploy and operate SOC platforms (SIEM, EDR, SOAR, NDR, TIP) across cloud and on-premises environments, keeping them available and performing.
• Manage log ingestion pipelines (Azure Event Hubs, forwarders, parsing, indexing) so data is complete, normalised and fit for detection.
• Administer infrastructure systems (Windows, Linux, cloud services), including patching, hardening, backup validation and access control via centralised identity platforms.
• Integrate the security tooling ecosystem (Splunk, Microsoft Defender, Cortex XSOAR, TIPs) and keep it stable and interoperable.
• Support detection and incident response by ensuring telemetry availability, retention and quality.
• Monitor and optimise platform health, capacity and scalability, and maintain documentation such as SOPs and data flow mappings.

Required profile

• Hands-on experience with SOC technologies (SIEM, EDR, SOAR) and log management architectures.
• Strong system administration across Windows, Linux and cloud environments (Azure preferred).
• Proven ability to troubleshoot distributed systems and ingestion pipelines, including root cause analysis.
• Experience with Splunk Cloud architecture, including ingestion optimisation and index management.
• Knowledge of cloud-native security services (Azure Event Hubs, Log Analytics, Defender suite) and advanced networking concepts (TCP/IP, DNS, routing, segmentation).