hybrid 50/50 for onboarding and after that fully remote

• Maintain large-scale Elastic Search-based SIEM, including design, capacity planning, cluster setup, optimization, performance tuning, and ongoing monitoring
• Provide engineering support to the Security operational team and act as a 3rd line escalation point if necessary
• Participate in problem-solving efforts if needed
• Review of services, patching, hardening
• Conduct technical troubleshooting efforts for complex network environments to address issues related to SIEM data collection
• Provide support to SOC Analysts utilizing the SIEM to respond to security incidents and events

• Very good knowledge of Linux Operating System (e.g. RHEL, CentOS)
• Very good knowledge of Elastic stack (Elasticsearch, Logstash, Kibana, and Beats)
• Good knowledge of configuration and deployment management tools (e.g. Ansible)
• Good knowledge of data center infrastructure components (e.g. LAN/WAN, storage - DRBD, physical and virtual servers, DNS, NTP, AD)
• Experience in managing Linux clustering (Pacemaker, Zookeeper)
• Experience with Apache (httpd) web servers
• Experience with Apache Kafka
• Understanding of PKI
• Fluency in English (spoken and written) and strong communication skill

• Coding expertise using languages such as Python, Bash, or Ruby
• Elastic Certified Engineer certification
• Experience with Atlassian tools and knowledge of ITIL