Data Engineer for Cognitive SIEM

Izertis
Izertis
Madrid, SpainOn-siteCompetitiveAdded 11 days agoJunior · 2+ yearsPermanentRemote: On Site

This job was originally posted in Spanish and automatically translated to English.

Job Description

At izertis, we are looking for a Data Engineer specializing in cybersecurity to participate in the design, construction, and evolution of a cognitive platform oriented towards critical environments, defense, classified infrastructures, and SOC operations.

You will be responsible for converting heterogeneous, scattered, and non-normalized events into structured, contextualized, and actionable information.

If you have a minimum of 2 years of experience in data engineering, systems integration, observability platforms, or SIEM environments and are interested in a new opportunity, apply now!

WHAT WILL YOU DO?

* Your main mission will be to design and implement processes for the ingestion, normalization, enrichment, correlation, quality, and traceability of security data, allowing events from multiple sources to be used by correlation engines, threat intelligence, SOC dashboards, and explainable artificial intelligence capabilities.
* You will act as a bridge between technical security sources, the SIEM, threat intelligence, the ARES ontology, and the AI-based cognitive layer.
* You will design, build, and maintain pipelines for the ingestion of events from multiple sources, including corporate SIEMs such as Microsoft Sentinel, Wazuh, Elastic, Graylog, or Splunk; network sensors such as Zeek, Suricata, or IDS/IPS; Windows and Linux operating systems; Sysmon, auditd, journald, or rsyslog events; OpenShift or Kubernetes platforms; EDR, antivirus, or antimalware systems; vulnerability management tools such as Nessus, OpenVAS, Grype, Trivy, Clair, or OpenSCAP; threat intelligence sources such as MISP, OpenCTI, or IOC feeds; as well as monitoring tools such as Zabbix, Prometheus, Grafana, Loki, or Maximo, and logs from applications, API Gateway, IAM, Keycloak, firewalls, VPN, and proxies.

WHAT DO YOU NEED?

Education: University Degree in Computer Engineering, Telecommunications, or similar.

Required Experience:

* Knowledge of databases
* Knowledge of Python and SQL
* Knowledge of Docker and Kubernetes
* Knowledge of data analytics
* Knowledge of SOC

Languages: English level C1

DESIRABLE

* Knowledge of observability tools such as Prometheus, Grafana, Loki, or OpenTelemetry.
* Knowledge of SIEM tools such as Wazuh, Sentinel, Splunk, or Elastic Security.
* Threat intelligence platforms such as MISP or OpenCTI.
* Vulnerability analysis tools.
* Security in Kubernetes environments.
* Compliance with ENS or CCN regulations.
* Use of graph databases or knowledge models.

SOFT SKILLS

* Analytical capacity and critical thinking
* Detail-oriented
* Organization and time management
* Responsibility and commitment to the task following methodological and quality standards
* Teamwork

WHERE WOULD WE LIKE YOU TO BE?

The functions will be carried out at the client's offices in Madrid, under a hybrid work model (60% remote work).

WHAT CAN WE OFFER YOU?

Permanent contract.

Salary according to your experience and expectations.

Flexible schedule with an intensive workday on Fridays.

Intensive workday during July and August (8:00 to 15:00) for better work-life balance.

Flexible remuneration: health insurance, restaurant vouchers, childcare vouchers, or transport.

Free English classes to improve or reinforce your level.

Access to a wide benefits platform with discounts on flights, hotels, fashion, technology, home, and more.

22 working days of vacation, your birthday, and December 24th and 31st.

GET TO KNOW IZERTIS

At Izertis, we drive the digital transformation of companies, organizations, and people through tailored, innovative, and impactful technological solutions.

Founded in 1996 and approaching 30 years of history, Izertis is part of the BME Continuous Market and is consolidated as one of the 1,000 fastest-growing companies in Europe.

Currently, we are more than 2,300 professionals distributed across offices in Europe, America, and Africa, with a presence in more than 50 countries, where we provide services through a wide portfolio of solutions: Software Engineering, Consultancy & Governance, Cloud & Infrastructure, Cybersecurity, IA & Data & Emerging Technologies, CX & Business Solutions, among other enabling technologies.

Would you like to be part of our team? We would love to meet you!

Need a visa? No sponsorship mentioned here. Browse visa jobs