Siem Data Engineer (M/F) - Capitole

Capitole; Santa Cruz de Tenerife; Presencial; EUR 42.000 - 68.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical insurance

Training allowance €1,200/year

Flexible compensation package

Remote work from Spain

Descripción de la vacante

Capitole busca un Ingeniero/a de Datos SIEM para un rol 100% remoto desde España. Integrarás fuentes de seguridad, desarrollarás pipelines con Cribl y crearás parsers para normalizar logs, trabajando con Splunk y Elastic en entornos multi-nube.

Se requieren más de 3 años en SIEM, experiencia en Cribl y scripting (Python/Bash/JS), y dominio de inglés. Ofrecemos contrato permanente y beneficios variados, con formación anual y compensación flexible.

Formación

• Más de 3 años de experiencia en procesamiento de logs/entornos SIEM.
• Experiencia con Cribl, Splunk y/o Elastic.
• Conocimientos de Python, Bash/Shell o JavaScript.
• Conocimientos de AWS, Azure o GCP.
• Nivel avanzado de inglés.

Responsabilidades

• Integrar fuentes de logs de seguridad en entornos SIEM.
• Construir y optimizar pipelines de procesamiento de logs con Cribl.
• Crear parsers y normalizar datos de logs.
• Definir modelos de datos y respaldar casos de uso de seguridad.
• Trabajar con Splunk, Elastic, entornos cloud y tecnologías de automatización.
• Apoyar la evolución continua de datos de seguridad y plataformas de logging.

Conocimientos

Log processing

SIEM

Advanced English

Regex

Data normalization

Python

Bash/Shell

JavaScript

Cloud (AWS/Azure/GCP)

Herramientas

Cribl

Splunk

Elastic

Python

Bash/Shell

JavaScript

AWS

Azure

GCP

Linux/Windows

Descripción del empleo

SIEM Data Engineer (M/F) - Capitole Capitole•santa cruz de tenerife, canarias, es

Descripción del trabajo

Capitole keeps growing, and we want you to grow with us!

What will you be working on?

• Integrating security log sources into SIEM environments.
• Building and optimizing log processing pipelines with Cribl.
• Creating parsers and normalizing log data.
• Defining data models and supporting SIEM security use cases.
• Working with Splunk / Elastic, cloud environments and automation technologies.
• Supporting the continuous evolution of security data and logging platforms.

What are we looking for?

• +3 years of experience in Log Stream Processing / SIEM environments.
• Hands‑on experience with Cribl.
• Experience with Splunk and/or Elastic.
• Strong knowledge of logs, parsers, Regex and data normalization.
• Experience with Linux/Windows environments and networking.
• Scripting skills with Python, Bash/Shell or JavaScript.
• Knowledge of cloud environments such as AWS, Azure or GCP.
• Understanding of Security Incident Response and security playbooks.
• Advanced English.

Why Capitole?

• 100% remote from Spain with a permanent contract.
• Exciting projects, cutting‑edge technologies, and agile methodologies.
• A positive working environment and a low employee turnover rate.
• €1,200 per year for training of your choice.
• Flexible working hours.
• More than 550 qualified professionals representing up to 24 nationalities.
• Private medical insurance.
• Flexible compensation package.
• Plenty of exciting events and team‑building activities.
• Capitole‑sponsored football team.
• Technology communities where you can share your knowledge and ideas with other teams. Sharing knowledge across the company is essential to us!

The employee will adhere to information security policies:

• Will have access to confidential information related to Capitole and the project they are working on.
• Must comply with the security policies and internal policies of the company and the client.
• Must sign an NDA.

Don’t know us yet? Discover Capitole!

https://capitole-consulting.com/

Feel free to send us your profile — we’re looking forward to meeting you!

#SIEM #DataEngineer #CyberSecurity #Cribl #Splunk #SecurityEngineering #Python #Cloud #RemoteJobs #TechJobs #Capitole