System Engineer – Elastic Stack & SIEM

Pauwels Consulting; Sint-Gillis; Hybrid; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Pauwels Consulting is seeking a specialized security engineer to join its client’s SIEM project team in Sint-Gillis. The role focuses on Elastic Stack implementation, ELK integration, and proactive threat hunting across cloud and on‑prem environments.

Responsibilities include designing dashboards, performing upgrades, and documenting security procedures. Fluency in French or Dutch is required, with a hybrid work model and a start in January 2027.

Qualifications

• 3+ years of security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• Experience managing Linux and Windows operating systems.
• Experience integrating security logs in AWS and Azure cloud environments.
• Scripting/automation skills with Python, API scripting, or ES/QL.
• Knowledge of EDR, network security, and intrusion detection tools.
• Familiarity with SOC2 or ISO 27001 frameworks and Kubernetes.

Responsibilities

• Design, configure, and optimize the Elastic Security platform to collect and correlate security events.
• Integrate logs from a predefined set of systems into the ELK stack.
• Develop and maintain security dashboards and reports using Kibana.
• Execute platform upgrades and ensure SIEM scalability and reliability.
• Incorporate threat intel feeds into Elasticsearch for proactive detection.
• Monitor logs and alerts across cloud and on‑prem environments and respond to incidents.
• Document procedures, diagrams, and delivery artifacts for SecOps operations.

Skills

SIEM

Elastic Stack

Kibana

Logstash

Kafka

AWS

Azure

Python

API scripting

ES/QL

EDR

Kubernetes

Tools

Elastic Agent

Job description

Our client, a leading organization in the public sector, is looking for a specialized professional to join their security project team. The role focuses on the integration and implementation of SIEM and log analytics solutions to support their Security Operations Center and SecOps operations.

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

• You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• You possess 3+ years of experience managing both Linux and Windows operating systems.
• You bring expertise in Elasticsearch, including data indexing, querying, and visualization techniques.
• You have experience integrating security logs within cloud environments such as AWS and Azure.
• You possess knowledge of scripting and automation using Python, API scripting, or ES/QL.
• You have experience with Endpoint Detection and Response (EDR), network security, and intrusion detection tools.
• You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001.
• You have experience working with cloud-native stacks including Kubernetes.
• You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch.

Nice to Haves

• Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English.

• Start date: January 2027.
• Duration: 1 year.
• Work regime: Full-time.
• Location: Sint-Gillis.
• Working model: Hybrid.
• Contract: open to both permanent employees and freelancers.