SIEM Data Engineer / SIEM & Log Management Engineer

Capitole; España; Teletrabalho; EUR 48 000 - 68 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Training budget

Resumo da oferta

Capitole is seeking a SIEM Data Engineer / SIEM & Log Management Engineer to join an international project for a leading German client in the automotive sector. The role focuses on security log analysis, data modelling and log normalization, collaborating with security and operations teams.

Remote work is 100% permitted, with a 40h/week schedule. We value experience with Cribl and Splunk, plus knowledge of log pipelines (Kafka, Logstash, Fluentd) and cloud/container tech (AWS/Azure/GCP,

Qualificações

• : 3+ years of experience with SIEM or log management tools.
• : Hands-on experience with Cribl or similar Log Stream Processing tools.
• : Knowledge of log analysis, parsing, Regex and data normalization.
• : Experience with Linux/UNIX/Windows environments and networks.
• : Knowledge of cloud or container technologies (AWS, Azure, GCP, Kubernetes).
• : Understanding of Security Incident Response or security monitoring processes.
• : Excellent English level, both written and spoken.

Responsabilidades

• Connect security-relevant log sources to a SIEM through Log Stream Processing platforms.
• Analyse security logs and define data models.
• Create and maintain parsers to normalize log data.
• Support SIEM data ingestion and security use case definition.
• Work with security and operations teams to improve log processing solutions.

Conhecimentos

SIEM experience

Log management

Splunk

Elastic/ELK

Cribl

Log parsing

Regex

Linux/UNIX/Windows

Cloud/Kubernetes

English proficiency

Ferramentas

Splunk

Elastic/ELK

Cribl

Kafka

Logstash

Fluentd

Descrição da oferta de emprego

With 1,000+ professionals and over a decade of experience, we’ve built an environment where talent is trusted, supported and continuously challenged to grow.

People-first culture built on trust and real proximity.

Stable environment with turnover clearly below industry average.

International, high-impact projects powered by modern tech stacks.

€1,200 annual training budget per employee.

Real flexibility, not just a promise.

Continuous feedback culture with monthly follow-ups and annual 360 reviews.

Active tech communities where knowledge is shared and innovation evolves.

A team that delivers and celebrates together.

Ready to grow with us? Take a look at this opportunity

We are looking for a SIEM Data Engineer / SIEM & Log Management Engineer to join an international project for a leading German client in the automotive sector. The role is focused on security log analysis, log ingestion, parsing, normalization and SIEM data modelling, working closely with security and operations teams.

We are especially interested in professionals with experience in Cribl and Splunk, although similar experience with log pipelines, log management, streaming technologies or SIEM environments will also be valued, especially with tools such as Kafka, Logstash or Elastic / ELK.

What will you do?

• Connect security-relevant log sources to a SIEM through Log Stream Processing platforms.
• Analyse security logs and define data models.
• Create and maintain parsers to normalize log data.
• Support SIEM data ingestion and security use case definition.
• Work with security and operations teams to improve log processing solutions.

What are we looking for?

• 3+ years of experience with SIEM or log management tools, especially Splunk, Elastic / ELK or similar.
• Hands-on experience with Cribl or similar Log Stream Processing / log pipeline tools such as Kafka, Logstash or Fluentd.
• Strong knowledge of log analysis, parsing, Regex and data normalization.
• Experience with Linux/UNIX/Windows environments and network technologies.
• Knowledge of cloud or container technologies such as AWS, Azure, GCP, Kubernetes or OpenStack.
• Understanding of Security Incident Response or security monitoring processes.
• Excellent English level, both written and spoken.

Location: 100% Remote

Schedule: 40h/week. Flexible, with reduced hours on Fridays

The employee will adhere to information security policies:

-Will have access to confidential information related to Capitole and the project they are working on.

-Must comply with the security policies and internal policies of the company and the client.