Security Engineer - Elastic SIEM

Neurho Solutions; Brussel; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Neurho Solutions is seeking a Security Engineer to design, implement and operate an Elastic-based SIEM and Log Analytics platform supporting SOC and SecOps. You will integrate logs across applications, infrastructure and cloud, building dashboards and tools to detect threats and report findings.

You will work with an architect and project manager to translate monitoring needs into reliable integrations and documentation, ensuring scalable, secure operations in cloud environments including

Qualifications

• Five+ years as an IT System Engineer, with recent practice.
• Proven Security Engineer experience focused on SIEM and Elastic Stack.
• Five+ years of Kibana experience for log analytics (recent).
• Five+ years of Elasticsearch experience with indexing, querying, and visualization.
• Five+ years of Linux experience (recent).
• Five+ years of SIEM tool experience (recent).
• Experience with Logstash for Elastic Stack.
• Kafka experience for security log integration.
• API scripting for automation.
• Programming for automation using Python or ES/QL.
• Cloud-native tech stacks (Kubernetes).
• Detail-oriented with strong problem-solving.
• Ability to work under pressure during incident response.
• Clear written and verbal security concept communication.
• Documentation of timelines, diagrams, manuals and decisions.
• Knowledge of SOC 2 and ISO 27001.

Responsabilités

• Design, configure, manage and optimise Elastic Security for event correlation.
• Onboard logs from systems and applications using Elasticsearch, Kibana, Logstash and Kafka.
• Build and maintain Elasticsearch-based security solutions for analysis and reporting.
• Integrate threat intel to support threat hunting.
• Upgrade the SIEM platform and ensure scalability and reliability.
• Monitor logs, alerts and reports to identify data issues in cloud environments.
• Create dashboards and reports for SecOps and owners.
• Agree changes with architect/project manager and implement per task descriptions.
• Produce and maintain technical documentation and diagrams.

Connaissances

Elastic Stack

Kibana

Elasticsearch

Linux

SIEM tools

Logstash

Kafka

Python

Automation scripting

Kubernetes

Windows OS

EDR

Outils

Elastic Agent

FileBeat/WinBeats

APM (Elastic)

Description du poste

We are looking for a Security Engineer to integrate and run an Elastic-based SIEM and Log Analytics platform supporting SOC and SecOps activities. The work brings security logs from applications, infrastructure and cloud environments into a common platform for threat detection, analysis and reporting. You will work with an architect and a project manager to turn defined monitoring needs into reliable integrations, dashboards and operational tools.

Your role

• Design, configure, manage and optimise Elastic Security to collect and correlate security events.
• Onboard logs from an agreed list of systems and applications using Elasticsearch, Kibana, Logstash and Kafka.
• Build and maintain Elasticsearch-based security solutions, including indexing and searching security data for analysis and reporting.
• Integrate threat intelligence feeds to support proactive threat hunting.
• Upgrade the SIEM platform and maintain its scalability and reliability.
• Monitor security logs, alerts and reports to identify data issues and anomalies in cloud environments.
• Create dashboards and reports based on the needs of SecOps and application and infrastructure owners.
• Agree system changes with the architect and project manager and implement them against clear task descriptions.
• Produce and maintain technical documentation, diagrams, manuals, procedures, recommendations and decision records.

You have

• At least five years of experience as an IT System Engineer, with practice within the last three years.
• Proven experience as a Security Engineer focused on SIEM and the Elastic Stack.
• At least five years of experience with Kibana for log analytics, used within the last three years.
• At least five years of experience with Elasticsearch, including indexing, querying and data visualisation, with use within the last three years.
• At least five years of experience with Linux, used within the last three years.
• At least five years of experience with SIEM tools, used within the last three years.
• Knowledge of Logstash within the Elastic Stack.
• Knowledge of Kafka for security log integration.
• Experience with API scripting for automation.
• Programming experience for automation and custom tools, for example with Python or ES/QL.
• Strong experience with log integration in cloud environments such as AWS and Azure.
• Excellent problem-solving skills.
• The ability to work under pressure during incident response.
• Strong written and verbal communication skills to explain complex security concepts clearly.
• Creation and maintenance of technical documentation, including timelines, diagrams, manuals, procedures, recommendations and decision records.
• Experience supporting cloud-native technology stacks, such as Kubernetes.
• Attention to detail.
• A customer-focused approach.
• A proactive approach to the work.
• Knowledge of cybersecurity frameworks and standards, such as SOC 2 and ISO 27001.
• Experience with Windows operating systems.
• Experience with Endpoint Detection and Response (EDR).
• Experience with log management.
• Experience with intrusion detection.
• Experience with email gateways.
• Experience with network security.
• Knowledge of ES/QL.
• Knowledge of dashboards for monitoring and reporting.
• Knowledge of the Elastic APM module for application performance monitoring.
• Knowledge of the Elastic SIEM module.
• Knowledge of Elastic Agent or equivalent log collection tools such as FileBeat, LogBeats, WinBeats or Syslog.
• Dutch or French at C1 level.

A plus

• English at C1 level.

Working at Neurho

Founded in 1998, Neurho is a Belgian IT and business consultancy. For more than 25 years, we have been helping banks, insurers, energy companies and public institutions in Belgium and Luxembourg with their transformation projects. At Neurho, you work on varied and challenging assignments, where your expertise is recognised and your growth encouraged. On top of your salary, you enjoy many extra-legal benefits, designed to suit your role, your needs and your personal wishes.

Neurho is committed to equal opportunity and welcomes every application, regardless of age, origin, nationality, gender, social background, beliefs or disability.