Siem Data Engineer (M/F)

Capitole; Mos; Presencial; EUR 42.000 - 66.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

100% remote desde España

€1,200 por año para formación

Seguro médico privado

Horarios flexibles

Descripción de la vacante

Capitole busca un/a SIEM Data Engineer para un proyecto internacional, centrado en la ingesta, transformación y normalización de datos y logs de seguridad. Trabajarás integrando fuentes de logs en SIEM y optimizando pipelines con Cribl, creando parsers y modelos de datos.

Se valorará experiencia con Splunk/Elastic, Linux/Windows y redes, y conocimientos de Python, Bash o JavaScript. Se ofrece contrato permanente y 100% remoto desde España.

Formación

• 3+ años de experiencia en entornos de SIEM y procesamiento de logs
• Hands-on experience with Cribl
• Experiencia con Splunk y/o Elastic
• Conocimiento sólido de logs, parsers, Regex y normalización de datos
• Experiencia en Linux/Windows y redes
• Habilidades de scripting con Python, Bash/Shell o JavaScript
• Conocimiento de entornos en la nube como AWS, Azure o GCP
• Comprensión de Respuesta a Incidentes de Seguridad y playbooks
• Inglés Avanzado

Responsabilidades

• Integrar fuentes de registros de seguridad en entornos SIEM.
• Construir y optimizar pipelines de procesamiento de logs con Cribl.
• Crear parsers y normalizar datos de logs.
• Definir modelos de datos y apoyar casos de uso de seguridad SIEM.
• Trabajar con Splunk/Elastic, entornos en la nube y tecnologías de automatización.
• Apoyar la evolución continua de datos de seguridad y plataformas de registro.

Conocimientos

Log Stream Processing

Security data engineering

Data normalization

Networking

Scripting

Advanced English

Herramientas

Cribl

Splunk

Elastic

Python

Bash/Shell

JavaScript

AWS

Azure

GCP

Regex

Linux/Windows

Descripción del empleo

Descripción del trabajo

Capitole keeps growing, and we want you to grow with us!

Are you experienced in SIEM environments and passionate about security data engineering?

At Capitole, we are looking for a SIEM Data Engineer (M/F) to join an international project, working on the ingestion, transformation and normalization of security-relevant data and logs.

What will you be working on?

• Integrating security log sources into SIEM environments.
• Building and optimizing log processing pipelines with Cribl.
• Creating parsers and normalizing log data.
• Defining data models and supporting SIEM security use cases.
• Working with Splunk / Elastic, cloud environments and automation technologies.
• Supporting the continuous evolution of security data and logging platforms.

What are we looking for?

• +3 years of experience in Log Stream Processing / SIEM environments.
• Hands‑on experience with Cribl.
• Experience with Splunk and/or Elastic.
• Strong knowledge of logs, parsers, Regex and data normalization.
• Experience with Linux/Windows environments and networking.
• Scripting skills with Python, Bash/Shell or JavaScript.
• Knowledge of cloud environments such as AWS, Azure or GCP.
• Understanding of Security Incident Response and security playbooks.
• Advanced English.

Why Capitole?

Our people come first. We believe in a more human approach, placing people at the heart of our company.

100% remote from Spain with a permanent contract.

Exciting projects, cutting-edge technologies, and agile methodologies.

A positive working environment and a low employee turnover rate.

€1,200 per year for training of your choice.

Flexible working hours.

More than 550 qualified professionals representing up to 24 nationalities.

Private medical insurance.

Flexible compensation package.

Plenty of exciting events and team-building activities.

Capitole-sponsored football team.

Technology communities where you can share your knowledge and ideas with other teams. Sharing knowledge across the company is essential to us!

Don’t know us yet? Discover Capitole!

https://capitole-consulting.com/

Feel free to send us your profile — we’re looking forward to meeting you!

#SIEM #DataEngineer #CyberSecurity #Cribl #Splunk #SecurityEngineering #Python #Cloud #RemoteJobs #TechJobs #Capitole

The employee will adhere to information security policies:

• Will have access to confidential information related to Capitole and the project they are working on.
• Must comply with the security policies and internal policies of the company and the client.
• Must sign an NDA.