ICT Security Engineer

⇒ Role Summary

Our client is looking for an ICT Security Engineering professional to increase its capability to improve the Bank detection & reaction to Cyber Threats by deploying, maintaining and improving the new SIEM infrastructure. The candidate will work in close collaboration with Production Infrastructure & Observability teams. The candidate will also fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

⇒ Main Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.
• Integrate new log sources and emerging technologies (including Kafka-based pipelines).
• Develop custom parsers/GROK patterns; apply regular-expression expertise.
• Participate in small-scale project-management tasks (scope definition, delivery tracking)
• Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
• Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System.

⇒ Qualifications & Experience

• Bachelor's Degree in Information Technology or relevant fields.
• Candidate must have overall 7 or more years of experience with minimum 4-5 years focused on large-scale setup to manage Logtash, regular expression.
• Banking-sector experiences is optional but regarded as a plus.

Role-Specific Technical Skills (Production Experience)

• Administration experience [Logtash, Vector (Datadog)].
• Linux administration (RHEL/Ubuntu).
• Experience writing Regex (Regular Expression).
• Scripting/programming – Python or Bash (minimum 2 years).
• Knowledge on SQL.
• Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.
• Background in IT Security concepts & administration (OS, Network).
• Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization; SIEM experience is plus.

Personal Attributes

• Rigorous and detail-oriented.
• Strong analytical and problem-solving skills.
• Self-driven; able to work autonomously and take ownership.
• Excellent communicator and collaborative team player.
• High energy, proactive attitude and willingness to up-skill.
• Able to manage multiple priorities simultaneously.