Senior Security Engineer (Logstash / Logging Infrastructure)

Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.

In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.

Description

For this role, we are looking for a Senior Security Engineer (Logstash / Logging Infrastructure) to assist one of our key clients – a leading global investment bank.

Responsibilities

Install and administrate the servers of the SIEM Infrastructure.; Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.; Integrate new log sources and emerging technologies (including Kafka-based pipelines).; Develop custom parsers/GROK patterns, apply regular-expression expertise.; Participate in small-scale project-management tasks (scope definition, delivery tracking); Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.; Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.; Comply with regulatory requirements and internal guidelines.; Contribute to the reporting of all incidents according to the Incident Management System

Requirements

Administration experience [Logstash, Vector (Datadog)]; Linux administration (RHEL/Ubuntu).; Experience writing Regex (Regular Expression); Scripting/programming – Python **or** Bash (minimum 2 years).; Knowledge on SQL; Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.; Background in IT Security concepts & administration (OS, Network).; Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization. SIEM experience is plus.; Total professional experience ≥ 7 years, with at least 4-5 years focused on large-scale setup to manage Logstash , regular expression.; Banking-sector experience is optional but regarded as a plus