About this role
<div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:24.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px"></H2> </div><div><p>With over 1,000 IT specialists across 6 countries, we develop and promote new business models within the Würth Group. We are seeking an Elastic Engineer to join our international Security Operations Center (SOC). The selected candidate will play a strategic role in the management, optimization, and scalability of the Elastic Stack-based SIEM platform, actively contributing to the enhancement of core threat detection and incident response capabilities.</p></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:24.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Responsibilities</H2> </div><div><ul> <li>Administer and manage the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) used as the SOC’s central SIEM platform.</li> <li>Design and optimize Elasticsearch clusters in distributed and high-availability environments.</li> <li>Develop data ingestion pipelines from heterogeneous sources using Logstash and Beats.</li> <li>Optimize performance, index mappings, and queries to enable efficient search and correlation.</li> <li>Collaborate with SOC analysts and security teams to integrate new data sources and detection use cases.</li> <li>Automate deployment, updates, and backups of the infrastructure.</li> <li>Implement security controls (X-Pack, TLS, RBAC) for the Elastic platform.</li> <li>Write and update technical documentation and operational procedures.</li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:24.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">Requirements</H2> </div><div><ul> <li>Solid experience with Elastic Stack in production environments.</li> <li>Deep understanding of SIEM architectures and security monitoring best practices.</li> <li>Experience with log management, data parsing, and normalization.</li> <li>Familiarity with cybersecurity concepts, threat intelligence, and detection engineering.</li> <li>Strong command of Linux systems and scripting (Bash, Python).</li> <li>Knowledge of automation and CI/CD tools (e.g., Ansible, GitLab CI, Terraform).</li> <li>Basic networking skills and understanding of common logging protocols (e.g., Syslog, JSON, HTTP APIs).</li> <li>Ability to work effectively in international and cross-functional teams.</li> <li>High level of autonomy and strong problem-solving</li> <li>Excellent communication skills, both written and verbal.</li> <li>Fluency in Italian and professional proficiency in English.</li> </ul> <p>Nice to Have:</p> <ul> <li>Elastic certifications (e.g., Elastic Certified Engineer) will be considered a strong plus.</li> </ul></div></div><div style="padding:10.0px 0.0px;border:1.0px solid transparent"><div style="font-size:24.0px;word-wrap:break-word"><H2 style="font-size:1.0em;margin:0.0px">What we offer</H2> </div><div><ul> <li>A position within a global cybersecurity team focused on protecting critical infrastructure.</li> <li>Collaboration with a highly skilled and motivated team.</li> <li>Opportunities to work on international projects within the Würth Group.</li> <li>Technology partnerships with Atlassian, Elastic, RedHat, Icinga, and Influx.</li> <li>Flexible working hours and remote work.</li> <li>A competitive compensation package, including a company MBO incentive system.</li> <li>A performance bonus convertible into a wide range of welfare services and benefits.</li> <li>Ongoing corporate training and the opportunity to obtain company-funded certifications.</li> <li>Accident insurance and supplementary health coverage.</li> <li>A young and dynamic work environment, with regular team events such as sports activities, informal dinners, cultural outings, and more</li> </ul></div></div></div>