Senior SIEM Engineer

Expleo Group

Remoto

Expleo is a trusted partner for your innovation journey. As a global engineering, technology and consulting service provider, we are ideally positioned to help you achieve your ambitions and future-proof your business. With a smart blend of bold thinking and reliable execution, we’re able to fast-track innovation through each step of your value chain.

We are strategically positioned to build value, with global footprint across 30 countries.

We are as global and local as you need us to be, with strong best-in-class pan-European technological centres and unique best-shoring capabilities.

We leverage a network of high value-adding affiliates in consulting and industrial excellence, and leading partners across multiple sectors to provide you with the most comprehensive services and solutions in an ever-changing environment.

Responsibilities

Administration, implementation, and optimization of Microsoft Sentinel environments.
Development and optimization of detection rules and KQL queries.
Integration and management of log sources and security telemetry.
Hands-on experience with Graylog, Logstash, Syslog-ng, NXLog, Windows Event Forwarding (WEF), and Syslog.
Automation using PowerShell, Bash, Python, and/or Ansible.
Management of Linux environments and security infrastructure.
Experience with Docker/Podman and containerized environments.
Improving monitoring coverage and reducing false positives.
Collaboration with infrastructure, network, and security teams.
Production and maintenance of technical documentation and operational procedures.