System Engineer ELK

Function

We are looking for a consultant to join our client's team, focused on enhancing their IT security capabilities. This position is critical in ensuring the reliability and functionality of their technology infrastructure while supporting public service initiatives through innovative solutions and best practices.

Responsibilities

As a valued member of the security team, you will collaborate closely with your peers while reporting to the team leader. Your primary responsibilities include:

• Executing operational tasks related to the software suite encompassing ElasticSearch, Kibana, Logstash, Elastic Security, and Apache Kafka.
• Providing expertise on Fleet architecture and managing Elastic Agents, including integration, policy management, and large-scale deployment.
• Designing and maintaining the architecture for log ingestion pipelines from various IT security services, ensuring effective data normalization in line with Elastic Common Schema (ECS).
• Playing an active role in configuring the SIEM module of Elastic Security and conducting security event analysis based on predefined use cases.
• Helping with the deployment and management of Elastic Agents for endpoint protection, including security policy management.
• Creating dashboards and alerts for monitoring and overseeing security postures.
• Documenting operational procedures and technical requirements to support knowledge transfer and solution longevity.

Ideal Candidate Profile

The ideal candidate should have a robust background in IT security practices and possess the following skills:

• Proficient in ElasticSearch, Kibana, Logstash, and general IT security protocols.
• Familiarity with Ansible for automating processes.
• Fluency in English and Dutch to collaborate effectively in a bilingual environment.
• A proactive approach to learning and applying best practices in IT security and operational excellence.

Working Environment

This position is based in Brussels, with a requirement for regular in-office presence to facilitate collaboration and knowledge sharing within the security team. This flexible work schedule supports a blend of remote and on-site activities aimed at strengthening inter-team communication and productivity.