Job description
We are looking for a Security Engineer to integrate and run an Elastic-based SIEM and Log Analytics platform supporting SOC and SecOps activities. The work brings security logs from applications, infrastructure and cloud environments into a common platform for threat detection, analysis and reporting. You will work with an architect and a project manager to turn defined monitoring needs into reliable integrations, dashboards and operational tools.
Your role
- Design, configure, manage and optimise Elastic Security to collect and correlate security events.
- Onboard logs from an agreed list of systems and applications using Elasticsearch, Kibana, Logstash and Kafka.
- Build and maintain Elasticsearch-based security solutions, including indexing and searching security data for analysis and reporting.
- Integrate threat intelligence feeds to support proactive threat hunting.
- Upgrade the SIEM platform and maintain its scalability and reliability.
- Monitor security logs, alerts and reports to identify data issues and anomalies in cloud environments.
- Create dashboards and reports based on the needs of SecOps and application and infrastructure owners.
- Agree system changes with the architect and project manager and implement them against clear task descriptions.
- Produce and maintain technical documentation, diagrams, manuals, procedures, recommendations and decision records.
You have
- At least five years of experience as an IT System Engineer, with practice within the last three years.
- Proven experience as a Security Engineer focused on SIEM and the Elastic Stack.
- At least five years of experience with Kibana for log analytics, used within the last three years.
- At least five years of experience with Elasticsearch, including indexing, querying and data visualisation, with use within the last three years.
- At least five years of experience with Linux, used within the last three years.
- At least five years of experience with SIEM tools, used within the last three years.
- Knowledge of Logstash within the Elastic Stack.
- Knowledge of Kafka for security log integration.
- Experience with API scripting for automation.
- Programming experience for automation and custom tools, for example with Python or ES/QL.
- Strong experience with log integration in cloud environments such as AWS and Azure.
- Excellent problem-solving skills.
- The ability to work under pressure during incident response.
- Strong written and verbal communication skills to explain complex security concepts clearly.
- Creation and maintenance of technical documentation, including timelines, diagrams, manuals, procedures, recommendations and decision records.
- Experience supporting cloud-native technology stacks, such as Kubernetes.
- Attention to detail.
- A customer-focused approach.
- A proactive approach to the work.
- Knowledge of cybersecurity frameworks and standards, such as SOC 2 and ISO 27001.
- Experience with Windows operating systems.
- Experience with Endpoint Detection and Response (EDR).
- Experience with log management.
- Experience with intrusion detection.
- Experience with email gateways.
- Experience with network security.
- Knowledge of ES/QL.
- Knowledge of dashboards for monitoring and reporting.
- Knowledge of the Elastic APM module for application performance monitoring.
- Knowledge of the Elastic SIEM module.
- Knowledge of Elastic Agent or equivalent log collection tools such as FileBeat, LogBeats, WinBeats or Syslog.
- Dutch or French at C1 level.
A plus
- English at C1 level.
Working at Neurho
Founded in 1998, Neurho is a Belgian IT and business consultancy. For more than 25 years, we have been helping banks, insurers, energy companies and public institutions in Belgium and Luxembourg with their transformation projects. At Neurho, you work on varied and challenging assignments, where your expertise is recognised and your growth encouraged. On top of your salary, you enjoy many extra-legal benefits, designed to suit your role, your needs and your personal wishes.
Neurho is committed to equal opportunity and welcomes every application, regardless of age, origin, nationality, gender, social background, beliefs or disability.