System Engineer – Elastic Stack & SIEM

Responsibilities

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

Requirements

• You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack ( Kibana , Logstash , Kafka ).
• You possess 3+ years of experience managing both Linux and Windows operating systems.
• You bring expertise in Elasticsearch , including data indexing, querying, and visualization techniques.
• You have experience integrating security logs within cloud environments such as AWS and Azure .
• You possess knowledge of scripting and automation using Python , API scripting, or ES/QL .
• You have experience with Endpoint Detection and Response (EDR) , network security, and intrusion detection tools.
• You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001 .
• You have experience working with cloud-native stacks including Kubernetes .
• You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch .
• Nice to Haves Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English .