Security telemetry engineer

Project overview

As part of the modernization of its cybersecurity architecture, our client wishes to optimize the collection and ingestion of logs in order to reduce data volumes and associated costs, while maintaining a level of detection adapted to the needs of the SOC.

Main missions

Technical environment

SIEM/XDR, Cribl or equivalent solutions, Microsoft Azure, Microsoft 365, Windows/Linux, virtualised infrastructures and security solutions.

Objective

Implement a high-performance, scalable, and cost-optimized log collection architecture, while ensuring SOC visibility and detection capabilities.

Start date: ASAP

Profile sought

Experienced engineer in cybersecurity, SIEM or Log Management, with experience in log collection and processing, data flow optimization, and ideally on a Telemetry Pipeline solution. Good knowledge of Microsoft Azure and SOC environments is expected.

• Audit the existing log collection architecture and map ingestion flows.
• Evaluate and compare Telemetry Pipeline solutions (Cribl, Datadog Observability Pipelines, CrowdStrike Onum, etc.) and carry out POCs.
• Optimize Microsoft Azure log collection before ingestion into the SIEM/XDR.
• Design and integrate the chosen solution: filtering, transformation, enrichment, and data routing.
• Reduce unnecessary data volumes while preserving the SOC's detection and investigation capabilities.
• Document the architecture and operational procedures, then ensure skills transfer to internal teams.

Project details

• Start: ASAP
• Duration: 6 mois renouvelable
• Remote: hybrid
• Location: Île-de-France, France, FR
• Languages: French