Elastic SIEM & Security Analytics Engineer

In4Matic; Brussel Hoofdstad; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

In4Matic is seeking a system engineering professional with a strong cybersecurity background to support the integration and optimization of a SIEM and log analytics environment for SecOps. You will onboard log sources, manage Elastic-based tooling, and contribute to dashboards, reports, and documentation.

You will implement and manage SIEM tooling, design dashboards, and ensure data reliability and actionable security insights for the SecOps and infrastructure teams.

Qualifications

• Hands-on experience with SIEM and Elastic Stack.
• Experience configuring and managing Elastic Search indexes and dashboards.
• Proficient in scripting (Python) for automation in security tooling.
• Experience integrating logs from cloud environments (AWS, Azure).
• Familiarity with Kubernetes-based platforms for log analytics.
• Proven ability to work across Windows and Linux systems.

Responsibilities

• Support SIEM tooling implementation based on Elastic Stack (Elastic Search, Kibana, Logstash, Kafka).
• Onboard log data from predefined systems and applications.
• Manage Elastic Search and Kibana environments and apply changes after consultation.
• Design and build dashboards and reports for SecOps and infrastructure teams.
• Provide documentation to support delivery and operations.
• Collect, correlate, and analyze security event data within the SIEM platform.
• Integrate threat intel feeds to support proactive threat hunting.
• Perform platform upgrades and ensure scalability and reliability.
• Monitor security logs, alerts, and reports to identify anomalies in data and cloud environments.

Skills

SIEM

Elastic Stack

Kibana

Logstash

Kafka

Python

ES/QL

Cloud (AWS/Azure)

Kubernetes

Windows

Linux

EDR & SIEM tooling

SOC2 / ISO27001 knowledge

Tools

Elastic Search

Kibana

Logstash

Kafka

Elastic Agent

APM

Job description

In4Matic is seeking a system engineering professional with a strong cybersecurity background to support the integration and optimization of a SIEM and log analytics environment for SecOps. You will onboard log sources, manage Elastic-based tooling, and contribute to dashboards, reports, and documentation.

You will implement and manage SIEM tooling, design dashboards, and ensure data reliability and actionable security insights for the SecOps and infrastructure teams.