Remote SIEM Data Engineer | Cribl, Splunk & Cloud

Capitole; León; Presencial; EUR 40.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical insurance

Training allowance €1,200/year

Flexible compensation package

Remote from Spain (100% remote)

Team events

Descripción de la vacante

Capitole is seeking a SIEM Data Engineer to join an international project, handling ingestion, transformation, and normalization of security data and logs. You will build log pipelines, create parsers, and define data models for SIEM use cases, working with Splunk/Elastic and cloud environments.

The role requires 3+ years in SIEM/log processing, Cribl proficiency, and strong English, with a 100% remote-from-Spain permanent contract.

Formación

• 3+ years in log stream processing or SIEM environments.
• Hands-on Cribl experience required.
• Experience with Splunk and/or Elastic.
• Strong knowledge of logs, parsers, Regex and data normalization.
• Experience with Linux/Windows and networking.
• Scripting skills: Python, Bash or JavaScript.
• Cloud exposure (AWS, Azure or GCP).
• Understanding of incident response and security playbooks.
• Advanced English language skills.

Responsabilidades

• Ingest, transform, and normalize security data and logs.
• Integrate security log sources into SIEM environments.
• Build and optimize log processing pipelines.
• Create parsers and data models for SIEM use cases.
• Work with Splunk/Elastic and cloud environments.
• Support evolution of logging platforms and automation.

Conocimientos

Log analysis

Regex

Python

Bash/Shell

JavaScript

Networking

Linux/Windows

Cloud concepts

Security incident response

Educación

Bachelor's degree in computer science or equivalent

Herramientas

Cribl

Splunk

Elastic

Descripción del empleo

Capitole is seeking a SIEM Data Engineer to join an international project, handling ingestion, transformation, and normalization of security data and logs. You will build log pipelines, create parsers, and define data models for SIEM use cases, working with Splunk/Elastic and cloud environments.

The role requires 3+ years in SIEM/log processing, Cribl proficiency, and strong English, with a 100% remote-from-Spain permanent contract.