- Sopra Steria
- Singapore,
- Full-Time
- 5 days ago
Senior Security Engineer (Logstash / Logging Infrastructure).
Before you go
Before you leave us, sign up for our email alerts
We don't do job spam, just the best digital jobs delivered straight to your inbox.
Senior Security Engineer (Logstash / Logging Infrastructure): our view in 3 lines...
- The Role:This role is for a security engineer who builds and maintains the logging and SIEM platforms that support security monitoring for a large financial organisation.
- The Person:The person will install and administer SIEM infrastructure servers, build Ansible and Python or Bash automation, integrate new log sources including Kafka-based pipelines, and develop custom parsers and GROK patterns.
- Requirements:The ideal candidate has production experience with Logstash, Vector (Datadog), Linux administration (RHEL/Ubuntu), Regex, Python or Bash, SQL, Ansible, CI/CD pipelines, and logging platforms including SIEM.
About the role
Company Description
Sopra Steria is a listed European technology leader specializing in Consulting, Digital Services, and Software. With over 51,000 employees worldwide across Europe, North America and Asia, the Group supports organizations in driving their digital transformation and delivering sustainable business value.
In Asia Pacific, Singapore serves as the regional headquarter for Sopra Steria’s Infrastructure, Cloud and Cybersecurity services.
Job Description
Description:
For this role, we are looking for a Senior Security Engineer (Logstash / Logging Infrastructure) to assist one of our key clients – a leading global investment bank.
Responsibilities:
- Install and administrate the servers of the SIEM Infrastructure.
- Build & maintain automation (Ansible playbooks, python/bash scripts) and self-service tool to minimize manual work.
- Integrate new log sources and emerging technologies (including Kafka-based pipelines).
- Develop custom parsers/GROK patterns; apply regular-expression expertise.
- Participate in small-scale project-management tasks (scope definition, delivery tracking)
- Act as a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
- Contribute to the Permanent Control framework for implementation of policies and procedures in day‐to‐day business activities, such as Control Plan.
- Comply with regulatory requirements and internal guidelines.
- Contribute to the reporting of all incidents according to the Incident Management System
Qualifications
Role Specific Technical Skills:
Production experience across the following technologies:
- Administration experience [Logstash, Vector (Datadog)]
- Linux administration (RHEL/Ubuntu).
- Experience writing Regex (Regular Expression)
- Scripting/programming – Python **or** Bash (minimum 2 years).
- Knowledge on SQL
- Automation/orchestration – Ansible (or equivalent) and CI/CD pipelines.
- Background in IT Security concepts & administration (OS, Network).
- Managing Production security tools with focus on logging platforms – ingestion, indexing, monitoring and analytics (mandatory) preferably in large organization. SIEM experience is plus.
Specific Qualifications:
- Total professional experience ≥ 7 years, with at least 4-5 years focused on large-scale setup to manage Logstash , regular expression.
- • Banking-sector experience is optional but regarded as a plus
Additional Information
•Work-life balance: Hybrid working mode, 18 days of Annual leave
•Health & insurance: Comprehensive coverage including General Practitioner, hospitalization, dental, and optical
•Performance incentives: Annual bonus based on individual performance
•Learning & development: Training programs, certification opportunities, and training incentives to support career growth
•Team culture: Regular team-building activities and social events