System Engineer – Elastic Stack & SIEM

Our client, a leading organization in the public sector, is looking for a specialized professional to join their security project team. The role focuses on the integration and implementation of SIEM and log analytics solutions to support their Security Operations Center and SecOps operations.

• Design, configure, and optimize the Elastic Security platform to collect and correlate security event data.
• Integrate log data from a predefined list of systems and applications into the ELK stack.
• Develop and maintain security-focused dashboards and reports using Kibana to meet organizational needs.
• Execute platform upgrades and ensure the scalability and reliability of the SIEM infrastructure.
• Integrate threat intelligence feeds into Elasticsearch for proactive hunting and incident detection.
• Monitor security logs and alerts across cloud and on-premise environments to identify anomalies.
• Document technical procedures, system diagrams, and delivery artifacts to support security operations.

• You have 3+ years of experience in security engineering with a focus on SIEM and the Elastic Stack (Kibana, Logstash, Kafka).
• You possess 3+ years of experience managing both Linux and Windows operating systems.
• You bring expertise in Elasticsearch, including data indexing, querying, and visualization techniques.
• You have experience integrating security logs within cloud environments such as AWS and Azure.
• You possess knowledge of scripting and automation using Python, API scripting, or ES/QL.
• You have experience with Endpoint Detection and Response (EDR), network security, and intrusion detection tools.
• You bring familiarity with cybersecurity frameworks and standards such as SOC2 or ISO 27001.
• You have experience working with cloud-native stacks including Kubernetes.
• You're proactive, detail-oriented, and able to work effectively in incident response scenarios.
• You are fluent in French or Dutch.

Nice to Haves

• Experience with the Elastic APM (Application Performance Monitoring) module.
• Knowledge of Elastic Agent and various beats collectors.
• Active knowledge of English.

• Start date: January 2027.
• Duration: 1 year.
• Work regime: Full-time.
• Location: Sint-Gillis.
• Working model: Hybrid.
• Contract: open to both permanent employees and freelancers.