SIEM Data Engineer

Capitole; Spain (TX); On-site; USD 81,000 - 127,000; Full time

Benefits offered by this job

Training budget

Wellhub: fitness, wellness & mental

Work permit processing

International events

Job summary

Capitol e? Capitole Consulting is seeking a Senior SIEM Data Engineer to join an international cybersecurity team. You will design and optimize scalable SIEM platforms, integrate diverse log sources, and build advanced use cases for enterprise environments.

You will lead parsing, normalization, and log routing pipelines while contributing to security assessments and incident response support, collaborating with global operations to evolve the platform.

Qualifications

• Experience with Cribl and SIEM platforms (Splunk/Elastic).
• Ability to design parsers and normalize log data for monitoring.
• Develop and optimize log processing and routing pipelines.
• Create SIEM data models and security use cases.
• Participate in security assessments to identify detections.
• Improve SIEM capabilities and support platform evolution.
• Collaborate to automate log processing.
• Contribute to Proofs of Concept for new standards/tech.
• Support incident response with high-quality log engineering.

Responsibilities

• Connect and integrate security log sources into SIEM platforms using Cribl.
• Design parsers and normalize log data for efficient security monitoring.
• Develop and optimize log processing and routing pipelines.
• Create and document SIEM data models and security use cases.
• Participate in security assessments to identify detection opportunities.
• Improve SIEM detection capabilities and support continuous platform evolution.
• Collaborate with operations teams to automate and optimize log processing.
• Contribute to Proofs of Concept around new cybersecurity standards and technologies.
• Support incident response processes through high-quality log engineering.

Skills

SIEM platforms (Splunk/Elastic)

Log ingestion/normalization

Regex

Security Incident Response

Linux/Windows/UNIX

GitHub

Cloud: AWS/Azure/GCP

Analytical thinking

Tools

Cribl

Kubernetes

OpenStack

Terraform

Ansible

GitHub Actions

SOAR platforms

Job description

Capitole is one of the best IT consulting companies and the place you want to be. Why?

People in the center. We believe in a different model, more human, with the employee in the center of our company

Happiness and low turnover rate

€1200 per year training budget

More than 900 skilled professionals, from more than 27 nationalities

Tailored career path

Wellhub: access to fitness, wellness, and mental health support

Processing of the work permit for you to come to Spain with your family

Lots of amazing events

At Capitole Consulting we continue growing and we are looking for a Senior SIEM Data Engineer to join an international cybersecurity team working on large-scale SIEM architectures, log processing and security automation.

You will help design and optimize modern cybersecurity platforms by integrating heterogeneous log sources, building scalable data pipelines and developing advanced SIEM use cases for enterprise environments.

Your responsibilities

• Connect and integrate security log sources into SIEM platforms using Cribl.
• Design parsers and normalize log data for efficient security monitoring.
• Develop and optimize log processing and routing pipelines.
• Create and document SIEM data models and security use cases.
• Participate in security assessments to identify detection opportunities.
• Improve SIEM detection capabilities and support continuous platform evolution.
• Collaborate with operations teams to automate and optimize log processing.
• Contribute to Proofs of Concept around new cybersecurity standards and technologies.
• Support incident response processes through high-quality log engineering.

Requirements

• Experience working with Cribl.
• Experience with SIEM platforms (Splunk and/or Elastic).
• Strong understanding of log ingestion, parsing and normalization.
• Experience with Regular Expressions (Regex).
• Knowledge of Security Incident Response and SIEM use cases.
• Knowledge of Linux, Windows and UNIX.
• Experience with GitHub.
• Cloud knowledge in AWS, Azure and/or GCP.
• Kubernetes and/or OpenStack knowledge is a plus.
• Excellent analytical and problem-solving skills.

Nice to have

• Terraform
• Ansible
• GitHub Actions
• Security automation
• OCSF
• SOAR platforms

The employee will adhere to information security policies:

-Will have access to confidential information related to Capitole and the project they are working on.

-Must comply with the security policies and internal policies of the company and the client.