Siem data engineer fullremote
Summary
Capitole, an IT consulting firm, is hiring a 100% remote SIEM Data Engineer to onboard security log sources via log stream processing (Cribl) into SIEM platforms (Splunk/Elastic), define parsers and data models, and build security use cases. Requires fluent English (C1) and 3+ years of relevant experience.
Capitole is one of the best IT consulting companies and the place you want to be. Why?
People in the center. We believe in a different model, more human, with the employee in the center of our company
Interesting projects. Cutting-edge technologies. Agile methologies
Happiness and low turnover rate
€1200 per year training budget
Flexible working hours
Tailored career path
Monthly follow-ups. 360o continuous evaluation
Private health insurance
Flexible retribution program
Wellhub: access to fitness, wellness, and mental health support
Processing of the work permit for you to come to Spain with your family
Technological communities
Lots of amazing events
Interested in joining us? Take a look at this opportunity
SIEM Data Engineer! — 100% Remote - Fluent English (C1)
Required Qualifications:
Successfully completed degree with a focus on Computer Science, IT Security, or equivalent professional experience. Knowledge of cloud technologies (Open Stack/Kubernetes) and commercial cloud providers such as AWS/Azure/GCP. At least 3 years of experience in Log Stream Processing (Cribl) and SIEM tools (Splunk/Elastic). Experience in IT operations and security, ideally through professional services or support. Profound knowledge of common log formats. Extensive knowledge of operating systems (UNIX, Linux, Windows) and network technologies. Experience with common scripting languages (Java Script, Bash/Shell, Python). Proficient in using version control software (e.g., Git Hub). Excellent knowledge of Regular Expressions and data normalization. Good data visualization skills. Profound knowledge of Security Incident Response and Playbook processes. Strong analytical thinking and an independent work ethic. Ability to interact effectively with both technical and non-technical stakeholders. Capable of adapting to a dynamic, fast-growing environment. Demonstrated interest in learning new topics and technologies.Key Responsabilities:
Connecting security-relevant log sources to a SIEM via a Log Stream Processing Platform. Analyzing logs, identifying/defining data models, and assisting in populating our SIEM solution with data. Defining parsers for normalizing log data using Log Stream Processing solutions. Planning and conducting security assessments for the identification and definition of security use cases within a SIEM solution. Documenting security use cases and data models with all relevant information for the continuous expansion and enhancement of our SIEM platform. Supporting the operations team in building and expanding log stream processing solutions like Cribl.Want to know more? Click here and find out!
See what people say about us Glassdoor Reviews
Feel free to send us your profile, we are excited to meet you!
The employee will adhere to information security policies:
-Will have access to confidential information related to Capitole and the project they are working on.
-Must comply with the security policies and internal policies of the company and the client.
-Must sign an NDA.