About this role
Responsibilities
- Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
- Integrate log data from a predefined list of systems and applications into the ELK stack.
- Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
- Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
- Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
- Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
- Document technical procedures, system diagrams, and delivery artifacts to support security operations.
Requirements
- You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack ( Kibana , Logstash , Kafka ).
- You possess 3+ years of experience managing both Linux and Windows operating systems.
- You bring expertise in Elasticsearch , including data indexing, querying, and visualization techniques.
- You have experience integrating security logs within cloud environments such as AWS and Azure . You possess knowledge of scripting and automation using Python , API scripting, or ES/QL . You have experience with Endpoint Detection and Response (EDR) , network security, and intrusion detection tools.
- You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001 . You have experience working with cloud-native stacks including Kubernetes . You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
- You are fluent in French or Dutch . Nice to Haves Experience with the Elastic APM (Application Performance Monitoring) module.
- Knowledge of Elastic Agent and various beats collectors.
- Active knowledge of English .