Azure Sentinel SIEM Integration Engineer

Siemens; Amadora; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work

Health insurance

Online learning

Shuttle service

Resumo da oferta

Siemens is seeking a Cyber Defense Center SIEM Integration Engineer to design and implement scalable, secure solutions for large data volumes across hybrid environments. You will contribute to the Siemens Cyber Defense Center’s mission to defend against cyber security threats worldwide.

In this role you will collaborate with Security Analysts, Threat Hunting, Incident Response, Data Science, SecDevOps and Threat Intelligence to onboard log sources, build Logstash parsers (Grok) per ECS, and

Qualificações

• University degree (or equivalent) in computer science, IT security, or related fields.
• Experience in security monitoring/SOC environments and their processes.
• Strong knowledge of Logstash, including Grok parsing and pipeline optimization.
• Experience onboarding logs from diverse sources (Syslog, JSON, REST APIs).
• Familiarity with cloud platforms, especially Microsoft Azure (Sentinel, Log Analytics, KQL).
• Proficiency with IaC (Terraform/OpenTofu) and Azure infrastructure for data ingestion.
• Ability to write strong technical documentation and communicate clearly.
• Good English written and spoken; collaborative mindset.

Responsabilidades

• Collaborate with defense teams to create high-quality threat detection for IT applications and logs.
• Identify and onboard relevant log sources, both on-premises and Azure-native.
• Implement and manage Azure resources to ingest data into Microsoft Sentinel.
• Develop log parsers with Logstash Grok expressions to normalize data to ECS.
• Advise on detection technologies and Azure-native solutions for scalability.
• Assist in administration and automation within hybrid environments.
• Participate in monitoring-driven Incident and Problem Management.
• Share knowledge on Azure, Sentinel architecture, data ingestion, and automation.

Conhecimentos

Grok parsing

Logstash

Regex

Security monitoring

Azure Sentinel knowledge

English communication

SOC processes

Threat detection

Formação académica

Bachelor's degree in computer science or IT security

Ferramentas

Azure Sentinel

Azure Monitor

Log Analytics

Event Hubs

Storage Accounts

Key Vault

Azure Container Instances

Terraform/OpenTofu

Linux

AMA / Azure Monitor Agent

Python

Descrição da oferta de emprego

Siemens is seeking a Cyber Defense Center SIEM Integration Engineer to design and implement scalable, secure solutions for large data volumes across hybrid environments. You will contribute to the Siemens Cyber Defense Center’s mission to defend against cyber security threats worldwide.

In this role you will collaborate with Security Analysts, Threat Hunting, Incident Response, Data Science, SecDevOps and Threat Intelligence to onboard log sources, build Logstash parsers (Grok) per ECS, and