System Engineer (Cyber Security)

You will join the project team responsible for the integration of the SIEM/Log Analytics solution for the benefit of the Security Operations Center (SOC) and the SecOps team.

Together with the architect and the Project Manager, you will support the onboarding of log data and, thanks to your experience, implement the necessary changes in the SIEM/Log Analytics tools.

Mission Context:

Assists in implementing the SIEM tooling, specifically the product range of ELASTIC Search/KIBANA/LogStash/Kafka, and onboarding logs from a predefined list of systems and applications. Manages the ELASTIC Search and KIBANA applications and, after consultation and through clear task descriptions, implements the necessary changes in the system. Creates and designs dashboards and reporting based on predefined needs from both the SecOps department and Application or Infrastructure managers. Ensures the necessary documentation.

Profile Description:

Deliverables

• Log Analytics infrastructure and ELASTIC Search software
• Log onboarding from the provided list of systems and applications
• Reports and Dashboards

Type of responsibilities

• Design, manage, configure, and optimize our SIEM platform (Elastic Security) to collect and correlate security event data.
• Collaborate with the team to build and maintain Elastic Search-based security solutions.
• Integrate threat intelligence feeds into SIEM and Elastic Search for proactive threat detection.
• Regularly perform SIEM platform upgrades and ensure its scalability and reliability.
• Monitor security logs, alerts, and reports to identify potential issues and anomalies with the data and in cloud environments.

Use Elastic Search to index and search security-related data for analysis and reporting.

Skills

• Proven experience as a Security Engineer with a focus on SIEM and the Elastic Search stack ‘Kibana – Logstash – Kafka’.
• Expertise in Elastic Search, including data indexing, queries, and visualization.
• Experience with API scripting and programming languages (e.g., Python or ES/QL) for automation and custom tool development.
• Strong experience with log integration in cloud environments such as AWS and Azure.
• Excellent problem-solving skills and the ability to work under pressure in incident response scenarios.
• Strong communication skills, both written and verbal, to effectively convey complex security concepts.
• Develop and maintain key delivery artifacts supporting timelines, diagrams, manuals, procedures, recommendations, and the communication of decisions.
• Supported environments with cloud-native technology stacks such as Kubernetes Cloud Native.
• Detailed, customer-oriented, and proactive by nature.
• Knowledge of cybersecurity frameworks and standards (e.g., SOC2, ISO 27001).
• Experience with the following: multiple operating systems (Windows, Linux), Endpoint Detection and Response (EDR), Cloud Native stacks, Security Information and Event Management (SIEM) tools, log management, intrusion detection, email gateways, and network security.

Knowledge

• Elastic Search, Kibana, LogStash, Kafka
• ES/QL
• Dashboards
• APM (Application Performance Monitoring) module Elastic
• SIEM module Elastic
• Elastic Agent (equivalent FileBeat, LogBeats, WinBeats, Syslog, …)

Assignment duration: 1760 hours in the year 2027