ICT Security Engineer

⇒ Role Summary Our client is looking for an ICT Security Engineering professional to increase its capability to improve the Bank detection & reaction to Cyber Threats by deploying, maintaining and improving the new SIEM infrastructure. The candidate will work in close collaboration with Production Infrastructure & Observability teams. The candidate will also fully be part of the Production CSIRT / SIEM Engg team with the opportunity to expand the scope of activities within the team.  ⇒ Main Responsibilities • Install and administrate the servers of the SIEM Infrastructure. • Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.  • Integrate new log sources and emerging technologies (including Kafka-based pipelines).  • Develop custom parsers/GROK patterns; apply regular-expression expertise.  • Participate in small-scale project-management tasks (scope definition, delivery tracking)  • Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.  • Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.  • Comply with regulatory requirements and internal guidelines.  • Contribute to the reporting of all incidents according to the Incident Management System.  ⇒ Qualifications & Experience • Bachelor's Degree in Information Technology or relevant fields. • Candidate must have overall 7 or more years of experience with minimum 4-5 years focused on large-scale setup to manage Logtash, regular expression. • Banking-sector experiences is optional but regarded as a plus. Role-Specific Technical Skills (Production Experience) • Administration experience [Logtash, Vector (Datadog)]. • Linux administration (RHEL/Ubuntu). • Experience writing Regex (Regular Expression). • Scripting/programming – Python or Bash (minimum 2 years).  • Knowledge on SQL. • Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.  • Background in IT Security concepts & administration (OS, Network).  • Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization; SIEM experience is plus.  Personal Attributes • Rigorous and detail-oriented.  • Strong analytical and problem-solving skills.  • Self-driven; able to work autonomously and take ownership.  • Excellent communicator and collaborative team player.  • High energy, proactive attitude and willingness to up-skill.  • Able to manage multiple priorities simultaneously.