System Engineer Elastic Stack & SIEM

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

What they ask

• Minimum 3 years of experience in security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• Minimum 3 years of experience managing both Linux and Windows operating systems.
• Expertise in Elasticsearch, including data indexing, querying, and visualization techniques.
• Experience integrating security logs within cloud environments such as AWS and Azure.
• Knowledge of scripting and automation using Python, API scripting, or ES/QL.
• Experience with Endpoint Detection and Response (EDR), network security, and intrusion detection tools.
• Familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001.
• Experience working with cloud-native stacks, including Kubernetes.

• You are proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch.

Desired.

• Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English.