Description:
For this position, we are looking for a Security Engineer proficient in Elastic Stack with Devops background to assist one of our clients – a leading global investment bank.
The team is looking for an ICT Security Engineering professional to increase its capability to improve the detection & reaction to Cyber Threats by:
•
Deploying, maintaining and improving the new SIEM infrastructure
The new joiner will work in close collaboration with Production Infrastructure & Observability teams. Finally, the new joiner will fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.
Responsibilities:
•Install and administrate the servers of the SIEM Infrastructure
•Develop automation on the different tasks and self-service tool
•Participate to the integration of new technologies logs
•Support logs parsing using custom parser/GROK development.
•Project management
•Be a full time member of the Production CSIRT / SIEM Engg team and participate to the various activities of the team
•Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
•Comply with regulatory requirements and internal guidelines.
•Contribute to the reporting of all incidents according to the Incident Management System
Role Specific Technical Skills:
Production experience across the following technologies:
•Working knowledge of Elastic stack (Elasticsearch / Logstash / Kibana / Beats) including data ingestion, management, monitoring & analytics. (Mandatory)
•In-depth experience with Kafka
•Good working knowledge of Linux (RedHat/Ubuntu)
•Programming skills is MUST (Python or Bash) is appreciated.
•Experienced production support engineer
•
Platform integration skills are a plus - Experience in installation, configuration, documentation and
•
administration of multiple pre-production and production platforms in both virtual and physical
•
environments.
•
Experience & skills in automation tools (e.g. Ansible) & DevOps pipelines are appreciated.
Specific Qualifications Required:
* Candidate must have a overall 7 or more years of experience with minimum 4-5 years on
relevant scope ie. Expertise in handling ELK stack for large platform or architecture
