ICT Security Engineer

⇒ Role Summary

Our client is looking for an ICT Security Engineering professional to increase its capability to improve the Bank detection & reaction to Cyber Threats by deploying, maintaining and improving the new SIEM infrastructure. The candidate will work in close collaboration with Production Infrastructure & Observability teams. The candidate will also fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.

⇒ Main Responsibilities

• Install and administrate the servers of the SIEM Infrastructure.
• Develop automation on the different tasks and self-service tool.
• Participate to the integration of new technologies logs.
• Support logs parsing using custom parser/GROK development.
• Project management.
• Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team.
• Contribute to the Permanent Control framework for implementation of policies and procedures in day-to-day business activities, such as Control Plan.
• Comply with regulatory requirements and internal guidelines.
• Contribute to the reporting of all incidents according to the Incident Management System.

⇒ Qualifications & Experience

• Bachelor's Degree in Information Technology or relevant fields.
• Candidate must have overall 7 or more years of experience with minimum 4-5 years on relevant scope ie. expertise in handling ELK stack for large platform or architecture.
• Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics (Mandatory).
• In-depth experience with Kafka.
• Good working knowledge of Linux (RedHat/Ubuntu).
• Programming skills is MUST (Python or Bash) is appreciated.
• Experienced production support engineer.
• Platform integration skills are a plus – experience in installation, configuration, documentation and administration of multiple pre-production and production platforms in both virtual and physical environments.
• Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.
• Rigorous and Strong problem-solving skills.
• Positive attitude, willing to upskill and carry out in-depth troubleshooting.
• Has the ability to work autonomously.
• Good interpersonal skills and team player.
• High energy level coupled with a desire to take on responsibility and able to multi-task.