System Security Engineer

In4Matic; Brussel Hoofdstad; Hybrid; EUR 70,000 - 110,000; Full time

Job summary

In4Matic is seeking a system engineering professional with a strong cybersecurity background to support the integration and optimization of a SIEM and log analytics environment for SecOps. You will onboard log sources, manage Elastic-based tooling, and contribute to dashboards, reports, and documentation.

You will implement and manage SIEM tooling, design dashboards, and ensure data reliability and actionable security insights for the SecOps and infrastructure teams.

Qualifications

• Hands-on experience with SIEM and Elastic Stack.
• Experience configuring and managing Elastic Search indexes and dashboards.
• Proficient in scripting (Python) for automation in security tooling.
• Experience integrating logs from cloud environments (AWS, Azure).
• Familiarity with Kubernetes-based platforms for log analytics.
• Proven ability to work across Windows and Linux systems.

Responsibilities

• Support SIEM tooling implementation based on Elastic Stack (Elastic Search, Kibana, Logstash, Kafka).
• Onboard log data from predefined systems and applications.
• Manage Elastic Search and Kibana environments and apply changes after consultation.
• Design and build dashboards and reports for SecOps and infrastructure teams.
• Provide documentation to support delivery and operations.
• Collect, correlate, and analyze security event data within the SIEM platform.
• Integrate threat intel feeds to support proactive threat hunting.
• Perform platform upgrades and ensure scalability and reliability.
• Monitor security logs, alerts, and reports to identify anomalies in data and cloud environments.

Skills

SIEM

Elastic Stack

Kibana

Logstash

Kafka

Python

ES/QL

Cloud (AWS/Azure)

Kubernetes

Windows

Linux

EDR & SIEM tooling

SOC2 / ISO27001 knowledge

Tools

Elastic Search

Kibana

Logstash

Kafka

Elastic Agent

APM

Job description

Function

Our client is looking for a system engineering professional with a strong cybersecurity background to support the integration and optimization of a SIEM and log analytics environment for a security operations function. In this role, you will work closely with architecture and project stakeholders to onboard log sources, manage Elastic-based security tooling, and contribute to the creation of dashboards, reports, and supporting documentation.

Responsibilities

You will play a key role in the implementation and ongoing management of the organization’s SIEM and log analytics platform. Your work will focus on making security data usable, reliable, and actionable for SecOps and infrastructure teams.

• Support the implementation of SIEM tooling based on Elastic Search, Kibana, Logstash, and Kafka.


• Onboard log data from a predefined list of systems and applications.


• Manage Elastic Search and Kibana environments and apply required changes after consultation.


• Design and build dashboards and reports aligned with SecOps and infrastructure needs.


• Provide the necessary documentation to support delivery and operational use.


• Collect, correlate, and analyze security event data within the SIEM platform.


• Integrate threat intelligence feeds to support proactive threat hunting.


• Perform platform upgrades and help ensure scalability and reliability.


• Monitor security logs, alerts, and reports to identify anomalies and potential issues in data and cloud environments.

Technical Skills

• Hands-on experience with SIEM and the Elastic stack, especially Kibana, Logstash, Kafka, and Elastic Search.


• Strong knowledge of Elastic Search for indexing, querying, and visualizing security-related data.


• Experience with API scripting and programming languages such as Python or ES/QL for automation and custom tooling.


• Experience integrating logs in cloud environments such as AWS and Azure.


• Experience with cloud-native environments, including Kubernetes-based platforms.


• Exposure to multiple operating systems, including Windows and Linux.


• Familiarity with EDR, SIEM tooling, log management, intrusion detection, mail gateways, and network security.


• Knowledge of cybersecurity frameworks and standards such as SOC2 and ISO 27001.


• Experience with Elastic modules such as APM, SIEM, and Elastic Agent.


• Ability to create and maintain delivery artefacts such as diagrams, manuals, procedures, recommendations, and decision records.

Profile

We are seeking a detail-oriented and proactive professional who can work confidently in security-focused and incident-response-driven environments. You should be comfortable collaborating with technical and non-technical stakeholders and translating complex security concepts into clear communication.

• Confirmed experience as an IT System Engineer or in a similar security engineering role.


• Proven experience in SIEM and Elastic Search-based environments.


• Strong troubleshooting skills and the ability to perform under pressure.


• Excellent written and verbal communication skills.


• Client-oriented mindset with a structured and proactive approach to work.


• Experience with Linux is required.

Practical Information

Language requirements: active knowledge of Dutch or French, and English is a plus.

Contactperson & Reference

• Reference #: INW28614


• Jeroen Van Hoecke


• [e-mail]