SIEM & Splunk Defender — Cybersecurity Engineer

NATO Communications and Information Agency (NCIA); Henegouwen; Sur place; EUR 71 000 - 80 000; Plein temps

Avantages offerts par ce poste

Expats allowances

Private health insurance

30 days leave

NATO Pension Scheme

Training & development

Résumé du poste

NCIA, based in Mons, Belgium, is seeking a skilled SIEM engineer to join the NATO Cyber Security Centre. You will lead Splunk-based data security initiatives, design and maintain distributed log collection, and provide expert guidance across security operations.

Required are a Bachelor’s degree (or substantial equivalent experience), strong Linux admin skills, and proficient scripting (Bash, Python, Ansible).

Qualifications

• At least 1 year of extensive practical experience as SIEM administrator in large enterprise environments.
• Experience in design and maintenance of distributed Splunk architectures.
• 2+ years and expert level experience with SIEM and log collection using Splunk Enterprise.
• Ability to analyze and interpret system, security and application logs to diagnose faults.
• Hands-on Linux systems and tools administration.
• Solid knowledge of computer and network security principles and operating system vulnerabilities.
• Scripting skills in Bash, Python or Ansible to automate tasks.
• Clear technical documentation and procedures writing skills.
• Ability to work autonomously, follow processes, and communicate clearly.

Responsabilités

• Act as SME for SIEM and log collection services.
• Provide technical advice and stay current with new technologies for data security projects.
• Responsible for management and further development of data security systems.
• Follow ITIL standards; support Operations and Service Delivery across lifecycle stages.
• Ensure data security systems are installed, configured, and operating correctly and integrated with other systems.

Connaissances

SIEM administration

Splunk expertise

Linux administration

Scripting: Bash/Python/Ansible

Incident analysis

Technical documentation

Autonomous working

English communication

Formation

Bachelor’s degree in related discipline; 2+ years post-related experience or 6+ years relevant experience without degree

Outils

Splunk Enterprise

Description du poste

NCIA, based in Mons, Belgium, is seeking a skilled SIEM engineer to join the NATO Cyber Security Centre. You will lead Splunk-based data security initiatives, design and maintain distributed log collection, and provide expert guidance across security operations.

Required are a Bachelor’s degree (or substantial equivalent experience), strong Linux admin skills, and proficient scripting (Bash, Python, Ansible).