Log Collection

At HAYS we are collaborating with one of the largest international banking networks. With a presence in 72 countries, with more than 190,000 professionals, the Group holds key positions in various banking and financial services activities, structured around three main operating divisions: Commercial Banking, Personal Banking and Services, Investment and Protection Services, and Corporate and Institutional Banking. It provides a wide range of innovative solutions tailored to the needs of its diversified customer base.
We are looking for an Security Log Collection Consultant to join a project.
What will your Tasks & Key Responsibilities be?
Maintain (upgrade, monitor, troubleshoot) the log collection infrastructure (SIEM, Arcsight, Logstash, Linux).
Improve the log collection infrastructure when possible.
Deploy (sometimes massively) new collectors. Scripting (shell, ansible) will have to be used.
Ensure (automatically) all the logs are collected and provide evidences (coverage reports) and remediate to the gap identified.
Participate in the log collection architecture design.
Onboard new logs. This includes opening flows, ordering and building servers, chasing other productions or applications teams, etc.
Coordinate with production and applications teams involved in the log collection process.
Document the log collection project: infrastructure, procedures, troubleshooting, reporting, etc.
Train CSIRT Analyst to act as backup for troubleshooting log collection issues.
Participate in security incident handling when a task force is required.
Propose security use cases and ensure appropriate logs are collected.
What are the requirements for the position?
At least, 2 years of experience in managing production security tool infrastructure for a large company.
Linux administration experience.
SIEM administration experience (Arcsight, Logstash, Elasticsearch).
Parsing.
Background/concepts in IT security.
System administration skills (Linux/Windows Servers).
Network administration background/knowledge.
SQL.
Scripting shell, ansible.
Monitoring tools (Nagios).
ETL.
What do we offer?
Stable project.
Work model: Hybrid.
Located in Madrid.
Competitive salary.
We are waiting for profiles like yours, passionate about technology and who want to take on a new challenge. If this is your case, sign up for the offer so we can tell you more!