As a SIEM Security Engineer / Architect, you will play a key role in the design, implementation, and evolution of security monitoring solutions. You will be responsible for the architecture, deployment, and maintenance of SIEM technologies, with a strong focus on the Elastic Stack (Logstash, Elasticsearch, Kibana).

Your main responsibilities will include:

• Designing, deploying, documenting, and improving SIEM solutions;

• Maintaining stability and ensuring long-term operability of the SIEM environment;

• Developing and managing log collection, normalization, and correlation processes;

• Using automation tools (Ansible, Python scripting, etc.) to streamline deployment and operations;

• Collaborating with infrastructure, security, and architecture teams to ensure seamless integration of monitoring capabilities;

• Participating in internal and external audits;

• Interfacing with internal/external auditors and regulators, providing clear, well-documented technical responses regarding monitoring, logging, and control measures in place;

• Writing and maintaining technical documentation (architecture, procedures, standards);

• Contributing to continuous improvement initiatives in operational security.

• Minimum 10 years of IT experience, including at least 5 years in cybersecurity with proven SIEM expertise;
• In-depth experience in the architecture, deployment, and operation of Elastic Stack (Logstash, Elasticsearch, Kibana);
• Strong knowledge of log ingestion, normalization, and processing pipelines;
• Hands-on experience with automation tools such as Ansible and scripting (Python or equivalent);
• Demonstrated ability to work with internal and external auditors and regulatory bodies, and to produce clear compliance-related documentation;
• Solid understanding of security monitoring compliance requirements;
• CISA (Certified Information Systems Auditor) certification is strongly desired;
• Strong analytical skills, attention to detail, and ability to communicate clearly and effectively;
• Fluency in English is mandatory (written and spoken);