SIEM Data Engineer FULLREMOTE en Vitoria, España

Capitole is one of the best IT consulting companies and the place you want to be. Why?

People in the center. We believe in a different model, more human, with the employee in the center of our company

Interesting projects. Cutting-edge technologies. Agile methologies

Happiness and low turnover rate

€1200 per year training budget

⌚ Flexible working hours

Tailored career path

Monthly follow-ups. 360º continuous evaluation

Private health insurance

Flexible retribution program

️ ♂️ Wellhub: access to fitness, wellness, and mental health support

Processing of the work permit for you to come to Spain with your family

Technological communities

Lots of amazing events

Interested in joining us? Take a look at this opportunity

SIEM Data Engineer! — 100% Remote ❗ - Fluent English (C1)

Required Qualifications :

• Successfully completed degree with a focus on Computer Science, IT Security, or equivalent professional experience.
• Knowledge of cloud technologies (OpenStack/Kubernetes) and commercial cloud providers such as AWS/Azure/GCP.
• At least 3 years of experience in Log Stream Processing (Cribl) and SIEM tools (Splunk/Elastic).
• Experience in IT operations and security, ideally through professional services or support.
• Profound knowledge of common log formats.
• Extensive knowledge of operating systems (UNIX, Linux, Windows) and network technologies.
• Experience with common scripting languages (JavaScript, Bash/Shell, Python).
• Proficient in using version control software (e.g., GitHub).
• Excellent knowledge of Regular Expressions and data normalization.
• Good data visualization skills.
• Profound knowledge of Security Incident Response and Playbook processes.
• Strong analytical thinking and an independent work ethic.
• Ability to interact effectively with both technical and non-technical stakeholders.
• Capable of adapting to a dynamic, fast-growing environment.
• Demonstrated interest in learning new topics and technologies.

️ Key Responsabilities:

• Connecting security-relevant log sources to a SIEM via a Log Stream Processing Platform.
• Analyzing logs, identifying/defining data models, and assisting in populating our SIEM solution with data.
• Defining parsers for normalizing log data using Log Stream Processing solutions.
• Planning and conducting security assessments for the identification and definition of security use cases within a SIEM solution.
• Documenting security use cases and data models with all relevant information for the continuous expansion and enhancement of our SIEM platform.
• Supporting the operations team in building and expanding log stream processing solutions like Cribl.

Want to know more? Click and find out!

See what people say about us ️ ♀️

Feel free to send us your profile, we are excited to meet you!

The employee will adhere to information security policies:

-Will have access to confidential information related to Capitole and the project they are working on.

-Must comply with the security policies and internal policies of the company and the client.

-Must sign an NDA.