Elastic SIEM Engineer – Threat Detection & Dashboards

Neurho Solutions; Brussel; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Neurho Solutions is seeking a Security Engineer to design, implement and operate an Elastic-based SIEM and Log Analytics platform supporting SOC and SecOps. You will integrate logs across applications, infrastructure and cloud, building dashboards and tools to detect threats and report findings.

You will work with an architect and project manager to translate monitoring needs into reliable integrations and documentation, ensuring scalable, secure operations in cloud environments including

Qualifications

• Five+ years as an IT System Engineer, with recent practice.
• Proven Security Engineer experience focused on SIEM and Elastic Stack.
• Five+ years of Kibana experience for log analytics (recent).
• Five+ years of Elasticsearch experience with indexing, querying, and visualization.
• Five+ years of Linux experience (recent).
• Five+ years of SIEM tool experience (recent).
• Experience with Logstash for Elastic Stack.
• Kafka experience for security log integration.
• API scripting for automation.
• Programming for automation using Python or ES/QL.
• Cloud-native tech stacks (Kubernetes).
• Detail-oriented with strong problem-solving.
• Ability to work under pressure during incident response.
• Clear written and verbal security concept communication.
• Documentation of timelines, diagrams, manuals and decisions.
• Knowledge of SOC 2 and ISO 27001.

Responsabilités

• Design, configure, manage and optimise Elastic Security for event correlation.
• Onboard logs from systems and applications using Elasticsearch, Kibana, Logstash and Kafka.
• Build and maintain Elasticsearch-based security solutions for analysis and reporting.
• Integrate threat intel to support threat hunting.
• Upgrade the SIEM platform and ensure scalability and reliability.
• Monitor logs, alerts and reports to identify data issues in cloud environments.
• Create dashboards and reports for SecOps and owners.
• Agree changes with architect/project manager and implement per task descriptions.
• Produce and maintain technical documentation and diagrams.

Connaissances

Elastic Stack

Kibana

Elasticsearch

Linux

SIEM tools

Logstash

Kafka

Python

Automation scripting

Kubernetes

Windows OS

EDR

Outils

Elastic Agent

FileBeat/WinBeats

APM (Elastic)

Description du poste

Neurho Solutions is seeking a Security Engineer to design, implement and operate an Elastic-based SIEM and Log Analytics platform supporting SOC and SecOps. You will integrate logs across applications, infrastructure and cloud, building dashboards and tools to detect threats and report findings.

You will work with an architect and project manager to translate monitoring needs into reliable integrations and documentation, ensuring scalable, secure operations in cloud environments including