> Markdown version of [/jobs/ext/2810361-siem-data-engineer-m-f](https://www.wearedevelopers.com/jobs/ext/2810361-siem-data-engineer-m-f). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Siem Data Engineer (M/F)

- **Company:** Capitole
- **Location:** Sevilla, Spain (Remote available)
- **Salary:** €14,400.0
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Microsoft Azure, Bash Shell, Cyber Security, Information Engineering, Data Normalization, Linux, Parsing, Security Log, Security Information and Event Management, Systems Integration, Data Logging, Scripting, Cloud Platform System, Stream Processing, Data Pipelines
- **Published:** September 9, 2026
- **Apply:** https://www.buscojobs.com.es/siem-data-engineer-m-f-en-sevilla-ID-370210798

## About the Role

* +3 years of experience inLog Stream Processing / SIEM environments.
 * Hands-on experience withCribl.
 * Experience withSplunk and/or Elastic.
 * Strong knowledge of logs, parsers,Regexand data normalization.
 * Experience with Linux/Windows environments and networking.
 * Scripting skills withPython, Bash/Shell or JavaScript.
 * Knowledge of cloud environments such asAWS, Azure or GCP.
 * Understanding of Security Incident Response and security playbooks.
*Advanced English

## Description

Capitole keeps growing, and we want you to grow with us!Si le interesa solicitar este empleo, por favor, asegúrese de cumplir los siguientes requisitos que se enumeran a continuación.Are you experienced in SIEM environments and passionate about security data engineering?At Capitole, we are looking for aSIEM Data Engineer (M/F)to join an international project, working on the ingestion, transformation and normalization of security-relevant data and logs.What will you be working on?* Integrating security log sources into SIEM environments.* Building and optimizing log processing pipelines withCribl.* Creating parsers and normalizing log data.* Defining data models and supporting SIEM security use cases.* Working withSplunk / Elastic, cloud environments and automation technologies.* Supporting the continuous evolution of security data and logging platforms.What are we looking for?* +3 years of experience inLog Stream Processing / SIEM environments.* Hands-on experience withCribl.* Experience withSplunk and/or Elastic.* Strong knowledge of logs, parsers,Regexand data normalization.* Experience with Linux/Windows environments and networking.* Scripting skills withPython, Bash/Shell or JavaScript.* Knowledge of cloud environments such asAWS, Azure or GCP.* Understanding of Security Incident Response and security playbooks.*Advanced EnglishWhy Capitole?Our people come first.We believe in a more human approach, placing people at the heart of our company.100% remote from Spainwith a permanent contract.Exciting projects, cutting-edge technologies, and agile methodologies.A positive working environment and a low employee turnover rate.€1,200 per yearfor training of your choice.Flexible working hours.More than 550 qualified professionals representing up to 24 nationalities.Private medical insurance.Flexible compensation package.Plenty of exciting events and team-building activities.Capitole-sponsored football team.Technology communities where you can share your knowledge and ideas with other teams.Sharing knowledge across the company is essential to us!Don't know us yet?Discover Capitole! xqziphufree to send us your profile -we're looking forward to meeting you!#SIEM #DataEngineer #CyberSecurity #Cribl #Splunk #SecurityEngineering #Python #Cloud #RemoteJobs #TechJobs #CapitoleThe employee will adhere to information security policies:-Will have access to confidential information related to Capitole and the project they are working on.-Must comply with the security policies and internal policies of the company and the client.-Must sign an NDA.


## Related Videos

- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [From Messy Queries to Scalable Systems - How Data Engineering actually works](https://www.wearedevelopers.com/videos/100203-from-messy-queries-to-scalable-systems-how-data-engineering-actually-works)
- [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker)
- [Modern Data Architectures need Software Engineering](https://www.wearedevelopers.com/videos/1030-modern-data-architectures-need-software-engineering)

## Related Articles

- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)