SIEM Engineer / Architect - CyberSOC

Project overview

Context

For a large international industrial group, we are looking for a SIEM Engineer / Architect specialized in log collection and Telemetry Pipelines.

The group's CyberSOC wishes to modernize its security data collection and ingestion architecture. The objective is to better control the flows sent to the SIEM (Palo Alto Cortex XSIAM), optimize volumes, and reduce costs, without losing visibility or detection capabilities.

Missions

Tools & Environment

Working Conditions

• Conduct an inventory of the current collection architecture: sources, mechanisms, and ingestion flows.
• Lead a comparative study of Telemetry Pipeline solutions (Cribl, Datadog Observability Pipelines, CrowdStrike Onum, Chronosphere): evaluation criteria, Proof of Concept, recommendation.
• Regain control of Azure log collection and optimize flows before ingestion.
• Integrate the chosen solution into the existing architecture.
• Implement data filtering, routing, transformation, and enrichment.
• Document the architecture, configurations, and operational procedures.
• Ensure knowledge transfer to operational teams.
• Azure
• Cortex XDR
• Palo Alto
• Security Information Event Management (SIEM)
• Splunk
• Syslog
• Mission location: Paris
• Long-term mission
• 2 days of remote work per week
• Start date: ASAP
• Professional English mandatory
• Required seniority: 8 to 10 years minimum experience

Project details

• Start: flexible
• Remote: hybrid
• Location: Paris, France, FR
• Languages: English, French