Splunk & Cribl SIEM Onboarding Engineer (Hybrid Brussels)

Pauwels Consulting; Schaarbeek; Hybride; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Pauwels Consulting in Brussels is seeking a security data engineer to help integrate diverse log and telemetry sources into a Splunk-based SIEM. You will design ingestion pipelines and ensure reliable data flows across on-prem and cloud environments.

The role requires hands-on Splunk experience, proficiency with JSON/XML/Syslog, and automation skills in Python or PowerShell. A proactive, stakeholder-facing mindset and fluency in English are essential.

Qualifications

• Must have hands-on Splunk experience (Enterprise/Cloud) including CIM and data normalization.
• Experience with Windows, Linux, and cloud logs (Azure/AWS/GCP).
• Proficient in JSON, XML, Syslog, REST APIs; scripting in Python or PowerShell.
• Strong SIEM concepts, log management, and data onboarding workflow knowledge.
• Fluent in English with good stakeholder management skills.

Responsabilités

• Lead onboarding of new log and telemetry sources into the centralized Splunk-based SIEM.
• Design and implement robust data ingestion pipelines and collection mechanisms.
• Configure and troubleshoot data normalization using Splunk CIM.
• Gather technical requirements from stakeholders to align onboarding with monitoring objectives.
• Perform data quality assessments and resolve complex ingestion issues.
• Optimize telemetry data flows to improve performance and cost efficiency.

Connaissances

Splunk Enterprise

Splunk Cloud

Universal Forwarders

Heavy Forwarders

SPL

Splunk CIM

Data normalization

Windows logs

Linux logs

Azure logs

AWS logs

GCP logs

JSON

XML

Syslog

REST APIs

Python

PowerShell

SIEM concepts

Log management

Stakeholder management

English fluency

Outils

Cribl Stream

Description du poste

Pauwels Consulting in Brussels is seeking a security data engineer to help integrate diverse log and telemetry sources into a Splunk-based SIEM. You will design ingestion pipelines and ensure reliable data flows across on-prem and cloud environments.

The role requires hands-on Splunk experience, proficiency with JSON/XML/Syslog, and automation skills in Python or PowerShell. A proactive, stakeholder-facing mindset and fluency in English are essential.