System Engineer – Elastic Stack & SIEM

Responsibilities

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

Requirements

• You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• You possess 3+ years of experience managing both Linux and Windows operating systems.
• You bring expertise in Elasticsearch, including data indexing, querying, and visualization techniques.
• You have experience integrating security logs within cloud environments such as AWS and Azure.
• You possess knowledge of scripting and automation using Python, API scripting, or ES/QL.
• You have experience with Endpoint Detection and Response (EDR), network security, and intrusion detection tools.
• You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001.
• You have experience working with cloud-native stacks including Kubernetes.
• You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch.

Nice to Haves

• Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English.