> Markdown version of [/jobs/ext/2665500-siem-data-engineer](https://www.wearedevelopers.com/jobs/ext/2665500-siem-data-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Siem Data Engineer

- **Company:** Capitole Santa Cilla Do Valadouro
- **Location:** Huesca, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Microsoft Windows, Amazon Web Services, Microsoft Azure, Bash Shell, Unix, Cloud Computing, Cyber Security, Data Visualization, Linux, Github, Python (Programming Language), OpenStack, Parsing, Regular Expressions, Ansible, Security Information and Event Management, Scripting, Data Ingestion, Kubernetes, Terraform, Security Orchestration, Automation & Response
- **Published:** September 2, 2026
- **Apply:** https://www.jobleads.com/es/job/e4710fa11f0e15e417135e3a9a526ebeb

## About the Role

* Experience working with Cribl.
 * Experience with SIEM platforms (Splunk and/or Elastic).
 * Strong understanding of log ingestion, parsing and normalization.
 * Experience with Regular Expressions (Regex).
 * Knowledge of Security Incident Response and SIEM use cases.
 * Experience with scripting (Python, Bash/Shell or JavaScript).
 * Knowledge of Linux, Windows and UNIX.
 * Experience with GitHub.
 * Cloud knowledge in AWS, Azure and/or GCP.
 * Kubernetes and/or OpenStack knowledge is a plus.
 * Excellent analytical and problem-solving skills.
 * English C1.

## Description

* Connect and integrate security log sources into SIEM platforms using Cribl.
 * Design parsers and normalize log data for efficient security monitoring.
 * Develop and optimize log processing and routing pipelines.
 * Create and document SIEM data models and security use cases.
 * Participate in security assessments to identify detection opportunities.
 * Improve SIEM detection capabilities and support continuous platform evolution.
 * Collaborate with operations teams to automate and optimize log processing.
 * Contribute to Proofs of Concept around new cybersecurity standards and technologies.
 * Support incident response processes through high-quality log engineering., * Terraform
 * Ansible
 * GitHub Actions
 * SIEM architecture
 * Security automation
 * OCSF
 * SOAR platforms
 * Data visualization

The employee will adhere to information security policies:

-Will have access to confidential information related to Capitole and the project they are working on.

-Must comply with the security policies and internal policies of the company and the client.

-Must sign an NDA.