System Engineer

Systems Engineer (Cybersecurity)
You will join the project team that will handle the integration of the SIEM/Log Analytics solution for the Security Operations Center (SOC) and the SecOps team.
In collaboration with the architect and project manager, you support the integration of log data and make the necessary modifications to the SIEM/Log Analytics tools using your experience.

Mission context:
Assists in the implementation of SIEM tools, specifically the ELASTIC Search/KIBANA/Log Stash/Kafka product suite, and in the integration of logs from a predetermined list of systems and applications. Manages ELASTIC Search and KIBANA applications and, after consultation, makes necessary system modifications through clear assignment descriptions. Creates and designs dashboards and reports based on the predefined needs of the SecOps department and application or infrastructure managers. Provides the necessary documentation.

Profile description:

• Deliverables
• Infrastructure Log Analytics et logical ELASTIC Search
• Connecting to the provided list of systems and applications
• Reports and dashboards

Type of responsibilities

• Design, manage, configure and optimize our Elastic Security platform (SIEM) to collect and correlate security event data.
• Work with the team to create and maintain security solutions based on Elastic Search.
• Integrate threat intelligence feeds into SIEM and Elastic Search for proactive threat hunting.
• Perform regular upgrades to the SIEM platform and ensure its scalability and reliability.
• Monitor security logs, alerts, and reports to identify potential issues and anomalies with data and in cloud environments.
• Use Elastic Search to index and search security-related data for analysis and reporting purposes.

Skills:

• Proven experience as a security engineer with a focus on SIEM and the elastic search stack "Kibana – Logstash – Kafka".
• Expertise in Elastic Search, including indexing, querying, and data visualization.
• Experience with API scripting and code programming languages ​​(e.g., Python or ES/QL) for automation and custom tool development.
• Solid experience integrating logs into cloud environments such as AWS and Azure.
• Excellent problem-solving skills and ability to work under pressure in incident response scenarios.
• Strong communication skills, both written and oral, to effectively convey complex security concepts.
• Develop and maintain key delivery artifacts to support timelines, diagrams, manuals, procedures, recommendations, and communication of decisions.
• Supported environments with cloud-native technology stacks such as Kubernetes Cloud Native.
• Detailed, customer-oriented, and proactive by nature.
• Knowledge of cybersecurity frameworks and standards (e.g., SOC2, ISO 27001)
• Experience with multiple operating systems (Windows, Linux), Endpoint Detection and Response (EDR), cloud-native stacks, Security Information and Event Management (SIEM) tools, log management, intrusion detection, email gateways, and network security Awareness

Knowledge:

• Elastic Search, Kibana, LogStash, Kafka
• ES/QL
• Dashboards
• APM (Application Performance Monitoring) module Elastic
• SIEM module Elastic
• Elastic Agent (equivalent FileBeat, LogBeats, WinBeats, Syslog,…)

Skills
Elastic Log/Kibana
Elasticsearch
Linux
SIEM

Languages
Dutch or French - Level Active knowledge  
English