SIEM Data Engineer FULLREMOTE

Capitole is one of the best IT consulting companies and the place you want to be. Why?

🤝 People in the center. We believe in a different model, more human, with the employee in the center of our company

👨 💻 Interesting projects. Cutting-edge technologies. Agile methologies

😁 Happiness and low turnover rate

🎓 €1200 per year training budget

⌚ Flexible working hours

🎯 Tailored career path

📆 Monthly follow-ups. 360º continuous evaluation

🩺 Private health insurance

💰 Flexible retribution program

🏋️ ♂️ Wellhub: access to fitness, wellness, and mental health support

📄 Processing of the work permit for you to come to Spain with your family

📢 Technological communities

🥳 Lots of amazing events

Interested in joining us? Take a look at this opportunity 👇

🚀SIEM Data Engineer! — 100% Remote❗🌐 - Fluent English (C1)🗣🌍

💡Required Qualifications:

• Successfully completed degree with a focus on Computer Science, IT Security, or equivalent professional experience.
• Knowledge of cloud technologies (OpenStack/Kubernetes) and commercial cloud providers such as AWS/Azure/GCP.
• At least 3 years of experience in Log Stream Processing (Cribl) and SIEM tools (Splunk/Elastic).
• Experience in IT operations and security, ideally through professional services or support.
• Profound knowledge of common log formats.
• Extensive knowledge of operating systems (UNIX, Linux, Windows) and network technologies.
• Experience with common scripting languages (JavaScript, Bash/Shell, Python).
• Proficient in using version control software (e.g., GitHub).
• Excellent knowledge of Regular Expressions and data normalization.
• Good data visualization skills.
• Profound knowledge of Security Incident Response and Playbook processes.
• Strong analytical thinking and an independent work ethic.
• Ability to interact effectively with both technical and non-technical stakeholders.
• Capable of adapting to a dynamic, fast-growing environment.
• Demonstrated interest in learning new topics and technologies.

🖥️ Key Responsabilities:

• Connecting security-relevant log sources to a SIEM via a Log Stream Processing Platform.
• Analyzing logs, identifying/defining data models, and assisting in populating our SIEM solution with data.
• Defining parsers for normalizing log data using Log Stream Processing solutions.
• Planning and conducting security assessments for the identification and definition of security use cases within a SIEM solution.
• Documenting security use cases and data models with all relevant information for the continuous expansion and enhancement of our SIEM platform.
• Supporting the operations team in building and expanding log stream processing solutions like Cribl.

Want to know more? Click here 🖱️ and find out!

See what people say about us 🕵️ ♀️ Glassdoor Reviews

Feel free to send us your profile, we are excited to meet you! 💙

The employee will adhere to information security policies:

-Will have access to confidential information related to Capitole and the project they are working on.

-Must comply with the security policies and internal policies of the company and the client.

-Must sign an NDA.