Sysdream

Security Engineer

• Design log collection pipelines and architectures with clients
• Size, secure, and document collection infrastructures
• Lead client-side prerequisites and challenge proposed architectures
• Implement collection from heterogeneous on-premises and SaaS/Cloud sources
• Handle non-standard collection methods using flat files, REST APIs, webhooks, message queues, and proprietary formats
• Write and maintain log parsing configurations, including field extraction, normalization, timestamping, multiline handling, and regular expressions
• Create or enhance Sekoia.io intakes and Splunk Technical Add-ons
• Develop, adapt, and troubleshoot Splunk configurations, ensuring version control, testing, and documentation
• Verify the completeness, quality, volume, and freshness of received events
• Check source-side logging compliance and provide client recommendations
• Validate ECS/CIM mappings with detection teams
• Diagnose end-to-end collection failures and identify root causes
• Implement collection monitoring and sustainable corrective actions
• Contribute to the operational and security maintenance of SIEM infrastructures
• Evolve architectures and develop Ansible playbooks
• Support project managers with architecture design and technical security requirements
• Contribute to security solution configuration, change management, and production installation validation
• Manage access rights, handle incidents and anomalies, and document processes
• Participate in client steering committees
• Provide occasional support to the SOC by analyzing and qualifying alerts, conducting initial investigations, and improving detection scenarios

Cybersecurity Engineer – SIEM Integration, SOC