ph3Capitole is one of the best IT consulting companies and the place you want to be. Why? /h3 pPeople in the center. We believe in a different model, more human, with the employee in the center of our company /p pHappiness and low turnover rate /p p€1200 per year training budget /p pMore than 900 skilled professionals, from more than 27 nationalities /p pTailored career path /p pWellhub: access to fitness, wellness, and mental health support /p pProcessing of the work permit for you to come to Spain with your family /p pLots of amazing events /p pAt Capitole Consulting we continue growing and we are looking for a bSenior SIEM Data Engineer /b to join an international cybersecurity team working on large-scale SIEM architectures, log processing and security automation. /p pYou will help design and optimize modern cybersecurity platforms by integrating heterogeneous log sources, building scalable data pipelines and developing advanced SIEM use cases for enterprise environments. /p h3Your responsibilities /h3 ul liConnect and integrate security log sources into SIEM platforms using Cribl. /li liDesign parsers and normalize log data for efficient security monitoring. /li liDevelop and optimize log processing and routing pipelines. /li liCreate and document SIEM data models and security use cases. /li liParticipate in security assessments to identify detection opportunities.



/li liImprove SIEM detection capabilities and support continuous platform evolution. /li liCollaborate with operations teams to automate and optimize log processing. /li liContribute to Proofs of Concept around new cybersecurity standards and technologies. /li liSupport incident response processes through high-quality log engineering. /li /ul h3Requirements /h3 ul liExperience working with bCribl /b. /li liExperience with bSIEM platforms (Splunk and/or Elastic) /b. /li liStrong understanding of blog ingestion, parsing and normalization /b. /li liExperience with bRegular Expressions (Regex) /b. /li liKnowledge of bSecurity Incident Response /b and SIEM use cases. /li liKnowledge of bLinux, Windows and UNIX /b. /li liExperience with bGitHub /b. /li liCloud knowledge in bAWS, Azure and/or GCP /b. /li liKubernetes and/or OpenStack knowledge is a plus. /li liExcellent analytical and problem-solving skills. /li /ul h3Nice to have /h3 ul liTerraform /li liAnsible /li liGitHub Actions /li liSecurity automation /li liOCSF /li liSOAR platforms /li /ul pThe employee will adhere to information security policies: /p p-Will have access to confidential information related to Capitole and the project they are working on. /p p-Must comply with the security policies and internal policies of the company and the client. /p /p #J-18808-Ljbffr

📌 SIEM Data Engineer (España)
🏢 Capitole
📍 España