Security Analyst / Security Engineer (temporary)

Project overview

Strengthening the Security Operations Center (SOC) on a temporary basis.

Profile of the suited interim professional:

• Analyzing and handling complex security events and incidents
• Implementing structural improvements in ELK, detections, logging, monitoring, incident response, and automation
• Improving the security logging chain, including onboarding log sources and developing pipelines
• Creating and testing detection rules (detection engineering)
• Connecting infrastructural components and applications to the SIEM
• Building technical connections and automations via Python/Node-RED
• Setting up and maintaining Elasticsearch Ingest Pipelines and Logstash configurations
• Normalizing diverse log sources for SIEM detection
• Optimizing existing SOC processes via scripting and automation
• Supporting deployment and maintenance of security tooling in Kubernetes/OpenShift
• Representing the SOC in internal and external discussions
• Performing cyber threat intelligence activities and threat hunting
• Guiding Level 1 and 2 employees
• Several years of experience as a Security Engineer with Elastic, Logstash, and Kibana (ELK)
• Extensive experience with identifying and analyzing threats and translating them into use cases
• Experience with container infrastructures and creating and troubleshooting deployments
• Experience with Elastic XDR technology and using Elastic in combination with Fleet
• Knowledge of and experience with CTI, threat hunting, automation, and incident response
• Well-developed oral and written advisory skills in the Dutch language
• Proactive attitude with ownership and active knowledge sharing within the team
• Knowledge of Microsoft Sentinel within an MSSP environment is a plus

Project details

• Start: flexible
• Duration: 12 months
• Location: Soesterberg, Utrecht, Flevoland, NL
• Languages: Dutch