Remote SIEM Data Engineer | Log Analytics & Security

Capitole; España; Remote; EUR 48,000 - 68,000; Full time

Benefits offered by this job

Training budget

Job summary

Capitole is seeking a SIEM Data Engineer / SIEM & Log Management Engineer to join an international project for a leading German client in the automotive sector. The role focuses on security log analysis, data modelling and log normalization, collaborating with security and operations teams.

Remote work is 100% permitted, with a 40h/week schedule. We value experience with Cribl and Splunk, plus knowledge of log pipelines (Kafka, Logstash, Fluentd) and cloud/container tech (AWS/Azure/GCP,

Qualifications

• : 3+ years of experience with SIEM or log management tools.
• : Hands-on experience with Cribl or similar Log Stream Processing tools.
• : Knowledge of log analysis, parsing, Regex and data normalization.
• : Experience with Linux/UNIX/Windows environments and networks.
• : Knowledge of cloud or container technologies (AWS, Azure, GCP, Kubernetes).
• : Understanding of Security Incident Response or security monitoring processes.
• : Excellent English level, both written and spoken.

Responsibilities

• Connect security-relevant log sources to a SIEM through Log Stream Processing platforms.
• Analyse security logs and define data models.
• Create and maintain parsers to normalize log data.
• Support SIEM data ingestion and security use case definition.
• Work with security and operations teams to improve log processing solutions.

Skills

SIEM experience

Log management

Splunk

Elastic/ELK

Cribl

Log parsing

Regex

Linux/UNIX/Windows

Cloud/Kubernetes

English proficiency

Tools

Splunk

Elastic/ELK

Cribl

Kafka

Logstash

Fluentd

Job description

Capitole is seeking a SIEM Data Engineer / SIEM & Log Management Engineer to join an international project for a leading German client in the automotive sector. The role focuses on security log analysis, data modelling and log normalization, collaborating with security and operations teams.

Remote work is 100% permitted, with a 40h/week schedule. We value experience with Cribl and Splunk, plus knowledge of log pipelines (Kafka, Logstash, Fluentd) and cloud/container tech (AWS/Azure/GCP,