Siem Data Engineer

Capitole; Arbo; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Capitole Consulting busca un Senior SIEM Data Engineer para un equipo internacional de ciberseguridad. Diseñarás e implementarás plataformas SIEM modernas, integrando fuentes de log heterogéneas y pipelines escalables.

Desarrollarás casos de uso y ayudarás a optimizar detección en entornos empresariales. Trabajarás en proyectos con tecnologías de punta, en un entorno remoto desde España, con oportunidades de crecimiento y formación continua.

Formación

• Experiencia con Cribl para integración de logs y pipelines.
• Conocimientos en Splunk y/o Elastic SIEM.
• Conocimientos de ingestión, parsing y normalización de logs.
• Experiencia con Regex (expresiones regulares).
• Scripting en Python, Bash o JavaScript.
• Conocimientos de Linux, Windows y UNIX.
• GitHub para control de versiones y collaboration.
• Nube (AWS/Azure/GCP) y conceptos de seguridad en la nube.
• Kubernetes u OpenStack es un plus.
• Habilidad analítica y de resolución de problemas.
• Inglés C1.

Responsabilidades

• Conectar e integrar fuentes de log en plataformas SIEM usando Cribl.
• Diseñar parsers y normalizar datos para monitorización de seguridad.
• Desarrollar y optimizar flujos de procesamiento y enrutamiento de logs.
• Crear y documentar modelos de datos SIEM y casos de uso de seguridad.
• Participar en evaluaciones de seguridad para identificar detecciones.
• Mejorar capacidades de detección y evolucionar la plataforma.
• Colaborar con equipos de operaciones para automatizar procesamiento.
• Contribuir a PoC sobre nuevos estándares y tecnologías de ciberseguridad.
• Apoyar procesos de respuesta a incidentes con logs de alta calidad.

Conocimientos

Cribl

Splunk

Elastic

Regex

Python

Bash

JavaScript

GitHub

AWS

Azure

GCP

Kubernetes

OpenStack

Linux

Windows

UNIX

English C1

Descripción del empleo

Descripción del trabajo

Capitole is one of the best IT consulting companies and the place you want to be. Why?

Es esencial asegurarse de que cumple con los requisitos como solicitante para este puesto; por favor, lea atentamente la información a continuación.

People in the center. We believe in a different model, more human, with the employee in the center of our company.

Interesting projects. Cutting-edge technologies. Agile methologies.

Happiness and low turnover rate.

€1200 per year training budget.

Flexible working hours.

More than 900 skilled professionals, from more than 27 nationalities.

Tailored career path.

Monthly follow-ups. 360o continuous evaluation.

Private health insurance.

Flexible retribution program.

Wellhub: access to fitness, wellness, and mental health support.

Processing of the work permit for you to come to Spain with your family.

Technological communities.

Lots of amazing events.

Location: Spain (Full Remote).

Schedule: Flexible working hours + intensive Fridays.

English: C1.

At Capitole Consulting we continue growing and we are looking for a Senior SIEM Data Engineer to join an international cybersecurity team working on large-scale SIEM architectures, log processing and security automation.

You will help design and optimize modern cybersecurity platforms by integrating heterogeneous log sources, building scalable data pipelines and developing advanced SIEM use cases for enterprise environments.

Your responsibilities

• Connect and integrate security log sources into SIEM platforms using Cribl.
• Design parsers and normalize log data for efficient security monitoring.
• Develop and optimize log processing and routing pipelines.
• Create and document SIEM data models and security use cases.
• Participate in security assessments to identify detection opportunities.
• Improve SIEM detection capabilities and support continuous platform evolution.
• Collaborate with operations teams to automate and optimize log processing.
• Contribute to Proofs of Concept around new cybersecurity standards and technologies.
• Support incident response processes through high-quality log engineering.

Requirements

• Experience working with Cribl.
• Experience with SIEM platforms (Splunk and/or Elastic).
• Strong understanding of log ingestion, parsing and normalization.
• Experience with Regular Expressions (Regex).
• Knowledge of Security Incident Response and SIEM use cases.
• Experience with scripting (Python, Bash/Shell or JavaScript).
• Knowledge of Linux, Windows and UNIX.
• Experience with GitHub.
• Cloud knowledge in AWS, Azure and/or GCP.
• Kubernetes and/or OpenStack knowledge is a plus.
• Excellent analytical and problem-solving skills.
• English C1.

Nice to have

• Terraform
• Ansible
• GitHub Actions
• SIEM architecture
• Security automation
• OCSF
• SOAR platforms
• Data visualization

The employee will adhere to information security policies:

• Will have access to confidential information related to Capitole and the project they are working on.
• Must comply with the security policies and internal policies of the company and the client.
• Must sign an NDA.