SIEM / Elastic Cloud Enterprise Engineer (f/m/div)

Description du poste:

Do you have experience working in SIEM or Linux system administration and practice with Elastic Cloud Enterprise? (COMPANY NAME)'s Cyber team is hiring, and we want you to be a part of it. (COMPANY NAME)'s Cyber team spans across several countries around the world and covers Cyber Governance & Risk, Consulting, Security Monitoring, Incident Response & Digital Forensics and OT Security functions globally. Join our Cyber team as a SIEM / Elastic Cloud Enterprise Engineer and make your impact in the world of cybersecurity.
In this role, you will operate and maintain the Elastic Cloud Enterprise (ECE) cluster within our internal infrastructure. You will oversee deployment, monitoring, and administration of the ECE cluster. Furthermore, you will ensure high availability and disaster recovery readiness.

In your new role you will:

* Administer Logstash instances, configuring and managing Logstash for data ingestion
* Troubleshoot and resolve issues related to data processing
* Monitor and optimize SIEM infrastructure, analyzing system performance and implementing necessary adjustments. Maintain and monitor system logs and alerts
* Collaborate with cross-functional teams - work closely with our Defense Center team, the IT datacenter and networking teams
* Maintain comprehensive documentation of configurations, processes, and procedures
* Provide technical guidance and support as needed

Profil requis du candidat:

We are seeking an enthusiastic and motivated individual with great analytical thinking and problem-solving abilities, coupled with attention to detail. Your strong communication skills and team player mindset are essential to effectively collaborating within an international team. Additionally, you have a keen interest in sharing knowledge and learning from others.

You are best equipped for this task if you have:

* Master /Bachelor's degree in Computer Science, Information Technology, IT Security or any equivalent course
* At least 2 or more years of experience in SIEM and/or system administration
* Experience in managing and maintaining large-scale SIEM environments
* Experience with Elastic Cloud Enterprise (ECE) on private infrastructure and Docker container technology
* Strong proficiency in Linux system administration
* In-depth knowledge of ElasticSearch, Logstash, and Kibana
* Solid understanding of system monitoring, logging, and alerting practices
* Excellent troubleshooting and diagnostic abilities for effectively identifying and resolving complex issues
* Experience with Cloud services (AWS, Azure) and/or cloud based SIEM solutions (e.g. MS Sentinel) would be an advantage
* Familiarity with automation and scripting (e.g. Python, Bash, Rundeck) would be plus
* Related certificates (e.g. Elastic Certified Engineer) would be a plus
* Fluent in English
Please send us your CV in English