Senior Security Engineer (Logstash / Logging Infrastructure)
Summary
A Senior Security Engineer who installs and administers SIEM/logging infrastructure (Logstash, Vector) for a global investment bank: integrating log sources and Kafka pipelines, writing GROK/regex parsers, and automating with Ansible and Python/Bash as a full-time member of the client's Production CSIRT/SIEM engineering team.
Description:
For this role, we are looking for a Senior Security Engineer (Logstash / Logging Infrastructure) to assist one of our key clients – a leading global investment bank.
Responsibilities:
- Install and administrate the servers of the SIEM Infrastructure.
- Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.
- Integrate new log sources and emerging technologies (including Kafka-based pipelines).
- Develop custom parsers/GROK patterns; apply regular-expression expertise.
- Participate in small-scale project-management tasks (scope definition, delivery tracking)
- Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
- Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
- Comply with regulatory requirements and internal guidelines.
- Contribute to the reporting of all incidents according to the Incident Management System
Role Specific Technical Skills:
Production experience across the following technologies:
- Administration experience [Logstash, Vector (Datadog)]
- Linux administration (RHEL/Ubuntu).
- Experience writing Regex (Regular Expression)
- Scripting/programming – Python **or** Bash (minimum 2 years).
- Knowledge on SQL
- Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.
- Background in IT Security concepts & administration (OS, Network).
- Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization. SIEM experience is plus.
Specific Qualifications:
- Total professional experience ≥ 7 years, with at least 4-5 years focused on large-scale setup to manage Logstash , regular expression.
- • Banking-sector experience is optional but regarded as a plus
•Work-life balance: Hybrid working mode, 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events