Elastic SIEM Engineer for SOC & Kibana Dashboards

Pauwels Consulting; Sint-Gillis; Híbrido; EUR 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Descripción de la vacante

Pauwels Consulting is seeking a specialized security engineer to join its client’s SIEM project team in Sint-Gillis. The role focuses on Elastic Stack implementation, ELK integration, and proactive threat hunting across cloud and on‑prem environments.

Responsibilities include designing dashboards, performing upgrades, and documenting security procedures. Fluency in French or Dutch is required, with a hybrid work model and a start in January 2027.

Formación

• 3+ years of security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• Experience managing Linux and Windows operating systems.
• Experience integrating security logs in AWS and Azure cloud environments.
• Scripting/automation skills with Python, API scripting, or ES/QL.
• Knowledge of EDR, network security, and intrusion detection tools.
• Familiarity with SOC2 or ISO 27001 frameworks and Kubernetes.

Responsabilidades

• Design, configure, and optimize the Elastic Security platform to collect and correlate security events.
• Integrate logs from a predefined set of systems into the ELK stack.
• Develop and maintain security dashboards and reports using Kibana.
• Execute platform upgrades and ensure SIEM scalability and reliability.
• Incorporate threat intel feeds into Elasticsearch for proactive detection.
• Monitor logs and alerts across cloud and on‑prem environments and respond to incidents.
• Document procedures, diagrams, and delivery artifacts for SecOps operations.

Conocimientos

SIEM

Elastic Stack

Kibana

Logstash

Kafka

AWS

Azure

Python

API scripting

ES/QL

EDR

Kubernetes

Herramientas

Elastic Agent

Descripción del empleo

Pauwels Consulting is seeking a specialized security engineer to join its client’s SIEM project team in Sint-Gillis. The role focuses on Elastic Stack implementation, ELK integration, and proactive threat hunting across cloud and on‑prem environments.

Responsibilities include designing dashboards, performing upgrades, and documenting security procedures. Fluency in French or Dutch is required, with a hybrid work model and a start in January 2027.