Cyber Defense Center

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7d6ylw

Cyber Defense Center (CDC) Elastic EngineerWith over 1,000 IT specialists across 6 countries, we develop and promote new business models within the Würth Group. We are seeking an Elastic Engineer to join our international Security Operations Center (SOC). The selected candidate will play a strategic role in the management, optimization, and scalability of the Elastic Stack-based SIEM platform, actively contributing to the enhancement of core threat detection and incident response capabilities.

Tutti i potenziali candidati sono incoraggiati a leggere l'intera descrizione del lavoro prima di candidarsi.
Responsibilities:
- Administer and manage the Elastic Stack (Elasticsearch, Logstash, Kibana, Beats) used as the SOC’s central SIEM platform.
- Design and optimize Elasticsearch clusters in distributed and high-availability environments.
- Develop data ingestion pipelines from heterogeneous sources using Logstash and Beats.
- Optimize performance, index mappings, and queries to enable efficient search and correlation.




- Collaborate with SOC analysts and security teams to integrate new data sources and detection use cases.
- Automate deployment, updates, and backups of the infrastructure.
- Implement security controls (X-Pack, TLS, RBAC) for the Elastic platform.
- Write and update technical documentation and operational procedures.

Requirements:
- Solid experience with Elastic Stack in production environments.
- Deep understanding of SIEM architectures and security monitoring best practices.
- Experience with log management, data parsing, and normalization.
- Familiarity with cybersecurity concepts, threat intelligence, and detection engineering.
- Strong command of Linux systems and scripting (Bash, Python).
- Knowledge of automation and CI/CD tools (e.g., Ansible, GitLab CI, Terraform).
- Basic networking skills and understanding of common logging protocols (e.g., Syslog, JSON, HTTP APIs).
- Ability to work effectively in international and cross-functional teams.
-

Vedi l’offerta su Go Lavoro: golavoro.it/annuncio-lavoro/7d6ylw