Required skills
- SIEM
- Telemetry Pipelines
- Cybersecurity
- Log Management
- Azure
- M365
- VMware
- SAP
- Network Security
- Cribl
- Datadog
- CrowdStrike
- Palo Alto Networks
- Palo Alto Cortex XSIAM
Languages: French
Job description
A large international group is looking for a SIEM & Telemetry Pipelines Expert to optimize its security log collection and ingestion architecture as part of a CyberSOC transformation project.
Project overview
Mission Context
As part of a CyberSOC transformation project, a large international group is looking for a SIEM & Telemetry Pipelines Expert to optimize its security log collection and ingestion architecture.
The objective is to streamline telemetry flows, reduce SIEM ingestion costs, and improve data management, while maintaining incident detection and response capabilities.
Main Missions
- Audit the existing log collection and ingestion architecture (Windows/Linux, Azure, M365, VMware, SAP, network equipment, and security solutions).
- Compare several Telemetry Pipelines solutions (Cribl, Datadog Observability Pipelines, CrowdStrike Onum, Palo Alto Chronosphere) and conduct POCs.
- Define the target architecture and manage the integration of the chosen solution.
- Optimize Microsoft Azure log collection and implement data filtering, transformation, enrichment, and routing mechanisms.
- Ensure integration with Palo Alto Cortex XSIAM and preserve the SOC's detection capabilities.
- Write technical documentation and ensure knowledge transfer to operational teams.
Project details
- Start: flexible
- Remote: hybrid
- Location: Paris, France, FR
- Languages: French
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on collective.work