Siem Data Engineer

Capitole
Ribeira, Spain
about 1 month ago
Apply on www.buscojobs.com.es
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Shift work

Tech stack

JavaScript (Programming Language) Microsoft Windows Amazon Web Services Microsoft Azure Bash Shell Cyber Security Information Technology Consulting Linux Intrusion Detection and Prevention Python (Programming Language) OpenStack Parsing
+7 more
Regular Expressions Security Log Security Information and Event Management Scripting Data Ingestion Splunk Data Pipelines

Job description

Capitole is one of the best IT consulting companies and the place you want to be.Why?Inscríbase rápido, consulte la descripción completa desplazándose hacia abajo para conocer todos los requisitos de este puesto.People in the center.We believe in a different model, more human, with the employee in the center of our companyInteresting projects.Cutting-edge technologies.Agile methologiesHappiness and low turnover rate€** per year training budgetFlexible working hoursMore than 900 skilled professionals, from more than 27 nationalitiesTailored career pathMonthly follow-ups.360o continuous evaluationPrivate health insuranceFlexible retribution programWellhub: access to fitness, wellness, and mental health supportProcessing of the work permit for you to come to Spain with your familyTechnological communitiesLots of amazing eventsLocation: Spain (Full Remote)Schedule: Flexible working hours + intensive FridaysEnglish: C1At Capitole Consulting we continue growing and we are looking for a Senior SIEM Data Engineer to join an international cybersecurity team working on large-scale SIEM architectures, log processing and security automation.You will help design and optimize modern cybersecurity platforms by integrating heterogeneous log sources, building scalable data pipelines and developing advanced SIEM use cases for enterprise environments.Your responsibilitiesConnect and integrate security log sources into SIEM platforms using Cribl.Design parsers and normalize log data for efficient security monitoring.Develop and optimize log processing and routing pipelines.Create and document SIEM data models and security use cases.Participate in security assessments to identify detection opportunities.Improve SIEM detection capabilities and support continuous platform evolution.Collaborate with operations teams to automate and optimize log processing.Contribute to Proofs of Concept around new cybersecurity standards and technologies.Support incident response processes through high-quality log engineering.RequirementsExperience working with Cribl.Experience with SIEM platforms (Splunk and/or Elastic).Strong understanding of log ingestion, parsing and normalization.Experience with Regular Expressions (Regex).Knowledge of Security Incident Response and SIEM use cases.Experience with scripting (Python, Bash/Shell or JavaScript).Knowledge of Linux, Windows and UNIX.Experience with GitHub.Cloud knowledge in AWS, Azure and/or GCP.Kubernetes and/or OpenStack knowledge is a plus.Excellent analytical and problem-solving skills.English C1.Nice to haveTerraformAnsibleGitHub ActionsSIEM architectureSecurity automationOCSFSOAR platformsData visualizationWant to know more?Click here and find out!See what people say about us Glassdoor ReviewsFeel free to send us your profile, we are excited to meet you!The employee will adhere to information security policies:-Will have access to confidential information related to Capitole and the project they are working on.-Must comply with the security policies and internal policies of the company and the client.xqysrnh-Must sign an NDA.Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

Requirements

360o continuous evaluationPrivate health insuranceFlexible retribution programWellhub: access to fitness, wellness, and mental health supportProcessing of the work permit for you to come to Spain with your familyTechnological communitiesLots of amazing eventsLocation: Spain (Full Remote)Schedule: Flexible working hours + intensive FridaysEnglish: C1At Capitole Consulting we continue growing and we are looking for a Senior SIEM Data Engineer to join an international cybersecurity team working on large-scale SIEM architectures, log processing and security automation.You will help design and optimize modern cybersecurity platforms by integrating heterogeneous log sources, building scalable data pipelines and developing advanced SIEM use cases for enterprise environments.Your responsibilitiesConnect and integrate security log sources into SIEM platforms using Cribl.Design parsers and normalize log data for efficient security monitoring.Develop and optimize log processing and routing pipelines.Create and document SIEM data models and security use cases.Participate in security assessments to identify detection opportunities.Improve SIEM detection capabilities and support continuous platform evolution.Collaborate with operations teams to automate and optimize log processing.Contribute to Proofs of Concept around new cybersecurity standards and technologies.Support incident response processes through high-quality log engineering.RequirementsExperience working with Cribl.Experience with SIEM platforms (Splunk and/or Elastic). Strong understanding of log ingestion, parsing and normalization.Experience with Regular Expressions (Regex). Knowledge of Security Incident Response and SIEM use cases.Experience with scripting (Python, Bash/Shell or JavaScript). Knowledge of Linux, Windows and UNIX.Experience with GitHub.Cloud knowledge in AWS, Azure and/or GCP.Kubernetes and/or OpenStack knowledge is a plus.Excellent analytical and problem-solving skills.English C1.Nice to haveTerraformAnsibleGitHub ActionsSIEM architectureSecurity automationOCSFSOAR platformsData visualizationWant to know more?

Benefits & conditions

See what people say about us Glassdoor ReviewsFeel free to send us your profile, we are excited to meet you! The employee will adhere to information security policies:-Will have access to confidential information related to Capitole and the project they are working on. -Must comply with the security policies and internal policies of the company and the client. xqysrnh-Must sign an NDA. Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

About the company

Capitole is one of the best IT consulting companies and the place you want to be. Why? Inscríbase rápido, consulte la descripción completa desplazándose hacia abajo para conocer todos los requisitos de este puesto.People in the center. We believe in a different model, more human, with the employee in the center of our companyInteresting projects. Cutting-edge technologies. Agile methologiesHappiness and low turnover rate€** per year training budgetFlexible working hoursMore than 900 skilled professionals, from more than 27 nationalitiesTailored career pathMonthly follow-ups.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.buscojobs.com.es
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:36 min

Hiring passionate software engineers to tackle unprecedented scaling challenges

Dana Lawson Dana Lawson +1 · World Congress 2026 Europe

2:56 min

Open-sourcing a complex parsing library for game data

Johan Hutting Johan Hutting · World Congress 2024

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard · World Congress 2025

2:36 min

Managing complex operation sequence weights using recursive parsing

Florian Rappl · LIVE

3:10 min

Correlating dispersed logs using structured request tracing

Michael Eder +1 · LIVE

Videos

See all

Related articles

See all