System Engineer – Elastic Stack & SIEM

Pauwels Consulting; Brussel Hoofdstad; Híbrido; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Contract: permanent or freelance

Descripción de la vacante

Pauwels Consulting is seeking a security specialist to join their SIEM project team in a hybrid role based in Sint-Gillis, Belgium. You will design and optimize the Elastic Security platform, integrate log data into ELK, and develop dashboards to support SOC operations.

You will bring 3+ years in security engineering with Elastic Stack, Linux/Windows admin experience, and cloud familiarity (AWS/Azure). Fluency in French or Dutch is required, and the contract may be permanent or freelance with a

Formación

• 3+ years of security engineering experience focusing on SIEM and Elastic Stack.
• 3+ years of Linux and Windows administration experience.
• Experience with Elasticsearch data indexing, querying, and visualization.
• Experience integrating security logs in AWS/Azure.
• Scripting/automation using Python or ES/QL.
• Knowledge of SOC2 or ISO 27001 frameworks.
• Experience with Kubernetes and cloud-native stacks.
• Fluent in French or Dutch.

Responsabilidades

• Design, configure, and optimize Elastic Security platform for data collection and correlation.
• Integrate security logs from predefined systems into ELK stack.
• Develop and maintain security dashboards and reports in Kibana.
• Perform platform upgrades and ensure SIEM scalability and reliability.
• Incorporate threat intel into Elasticsearch for proactive detection.
• Monitor security logs across cloud and on-prem environments.
• Document procedures, diagrams, and artifacts to support SecOps.

Conocimientos

Security engineering

Incident response

Threat hunting

Scripting (Python)

Cloud security

Linux administration

Windows administration

Documentation

Communication

French/Dutch language

Herramientas

Elastic Stack

Kibana

Logstash

Kafka

Elasticsearch

Kubernetes

AWS

Azure

Python scripting

EDR tools

Descripción del empleo

Our client, a leading organization in the public sector, is looking for a specialized professional to join their security project team. The role focuses on the integration and implementation of SIEM and log analytics solutions to support their Security Operations Center and SecOps operations.

Responsibilities

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

Requirements

• You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• You possess 3+ years of experience managing both Linux and Windows operating systems.
• You bring expertise in Elasticsearch, including data indexing, querying, and visualization techniques.
• You have experience integrating security logs within cloud environments such as AWS and Azure.
• You possess knowledge of scripting and automation using Python, API scripting, or ES/QL.
• You have experience with Endpoint Detection and Response (EDR), network security, and intrusion detection tools.
• You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001.
• You have experience working with cloud-native stacks including Kubernetes.
• You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch.

Nice to Haves

• Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English.

Offer

• Start date: January 2027.
• Duration: 1 year.
• Work regime: Full-time.
• Location: Sint-Gillis.
• Working model: Hybrid.
• Contract: open to both permanent employees and freelancers.