Cyber Security Engineer

Freelance Splunk SIEM Engineer | SPL | Logs & Data | Luxembourg (On-site) | ASAP Start

Do you get a little thrill from a perfectly tuned regex?

Our client, a major European bank, is looking for a precision minded SIEM Security Engineer to make sure the data behind their security monitoring is complete, accurate and trustworthy.

Detection is only as good as the logs underneath it. In this role, you'll be the person who makes sure those logs tell the truth.

What you'll be doing

• Keeping onboarded log sources healthy and spotting data that has stopped flowing
• Onboarding new log sources in line with the client's logging roadmap
• Verifying that SIEM data accurately reflects what's happening in source systems
• Finding, documenting and fixing parsing defects, normalisation issues and logging gaps
• Transforming, filtering, routing and normalising event data across the pipeline
• Working directly with log-source owners to resolve gaps in a clear, constructive way
• Maintaining log inventories, parsing specs, runbooks and change records
• Providing backup cover for Splunk infrastructure: health checks, first line troubleshooting and supporting use case testing and tuning

What you bring

• Exceptional regular expression skills and strong parsing and normalisation experience with semi structured logs
• Solid IT fundamentals: systems, networking, authentication, logging
• Scripting ability in Python, PowerShell or Bash
• Meticulous attention to detail and a talent for clear documentation
• Excellent English, French is a plus

Bonus points

• Splunk SPL and knowledge object experience
• Familiarity with Splunk architecture (search heads, indexers, forwarders)
• Splunk certifications (Core Certified User, Power User, Enterprise Certified Admin)
• Experience building log loss or latency detection use cases

The details

• Contract: ASAP Start
• Location: On-site in Luxembourg (a requirement of the role)
• Rate: Competitive rate
• Eligibility: You must have the right to work in Luxembourg

Interested? Apply now or message me directly.

#Splunk #SIEM #Cybersecurity #Luxembourg #ContractJobs #SecurityEngineering