100% remote SIEM Data Engineer at Capitole, a Spanish IT consultancy: connect security log sources to a SIEM via a log stream processing platform (Cribl), define parsers and data models, and build/document security use cases using Splunk/Elastic, cloud (OpenStack, Kubernetes, AWS/Azure/GCP) and scripting (Python, JavaScript, Bash). Requires fluent English (C1) and 3+ years in log stream processing
Capitole is one of the best IT consulting companies and the place you want to be.
Obtenga más información sobre las tareas generales relacionadas con esta oportunidad a continuación, así como sobre las habilidades requeridas.
Why? People in the center.
We believe in a different model, more human, with the employee in the center of our company Interesting projects.
Cutting-edge technologies.
Agile methologies Happiness and low turnover rate €1200 per year training budget Flexible working hours Tailored career path Monthly follow-ups.
360º continuous evaluation Private health insurance Flexible retribution program Wellhub: access to fitness, wellness, and mental health support Processing of the work permit for you to come to Spain with your family Technological communities Lots of amazing events Interested in joining us? Take a look at this opportunity SIEM Data Engineer! — 100% Remote
- Fluent English (C1) Required Qualifications : Successfully completed degree with a focus on Computer Science, IT Security, or equivalent professional experience.
Knowledge of cloud technologies (OpenStack/Kubernetes) and commercial cloud providers such as AWS/Azure/GCP.
At least 3 years of experience in Log Stream Processing (Cribl) and SIEM tools (Splunk/Elastic).
Experience in IT operations and security, ideally through professional services or support.
Profound knowledge of common log formats.
Extensive knowledge of operating systems (UNIX, Linux, Windows) and network technologies.
Experience with common scripting languages (JavaScript, Bash/Shell, Python).
Proficient in using version control software (e.g., GitHub).
Excellent knowledge of Regular Expressions and data normalization.
Good data visualization skills.
Profound knowledge of Security Incident Response and Playbook processes.
Strong analytical thinking and an independent work ethic.
Ability to interact effectively with both technical and non-technical stakeholders.
Capable of adapting to a dynamic, fast-growing environment.
Demonstrated interest in learning new topics and technologies.
Key Responsabilities: Connecting security-relevant log sources to a SIEM via a Log Stream Processing Platform.
Analyzing logs, identifying/defining data models, and assisting in populating our SIEM solution with data.
Defining parsers for normalizing log data using Log Stream Processing solutions.
Planning and conducting security assessments for the identification and definition of security use cases within a SIEM solution.
Documenting security use cases and data models with all relevant information for the continuous expansion and enhancement of our SIEM platform.
Supporting the operations team in building and expanding log stream processing solutions like Cribl.
Want to know more? xqbhyrx Click here and find out! See what people say about us Glassdoor Reviews Feel free to send us your profile, we are excited to meet you! The employee will adhere to information security policies: -Will have access to confidential information related to Capitole and the project they are working on.
-Must comply with the security policies and internal policies of the company and the client.
-Must sign an NDA.