Senior Security Engineer (Logstash / Logging Infrastructure)

About the role

Sopra Steria, a listed European technology group with over 51,000 employees, is hiring a Senior Security Engineer (Logstash / Logging Infrastructure) in Singapore, its regional headquarters for Infrastructure, Cloud and Cybersecurity services. The engineer will support a key client, a leading global investment bank, by building and maintaining its SIEM infrastructure.

Key responsibilities

• Install and administer the servers of the SIEM infrastructure.
• Build and maintain automation (Ansible playbooks, Python/Bash scripts) and self-service tools to reduce manual work.
• Integrate new log sources and emerging technologies, including Kafka-based pipelines.
• Develop custom parsers and GROK patterns using regular-expression expertise.
• Take part in small-scale project-management tasks such as scope definition and delivery tracking.
• Be a full-time member of the Production CSIRT / SIEM Engineering team and contribute to all team activities.
• Contribute to the Permanent Control framework for implementing policies and procedures, such as the Control Plan.
• Comply with regulatory requirements and internal guidelines, and report incidents through the Incident Management System.

Required profile

• Total professional experience of at least 7 years, with 4-5 years focused on large-scale setups managing Logstash and regular expressions.
• Background in IT security concepts and administration (OS, network).
• Experience managing production security tools with a focus on logging platforms (ingestion, indexing, monitoring, analytics); large-organization experience preferred.
• SIEM experience is an advantage.
• Banking-sector experience is optional but regarded as a plus.

Required skills

• Production experience with Logstash and Vector (Datadog)
• Linux administration (RHEL/Ubuntu)
• Regular expressions and scripting in Python or Bash (at least 2 years)
• SQL knowledge
• Ansible or equivalent automation/orchestration and CI/CD pipelines

What we offer

• Hybrid working mode and 18 days of annual leave
• Comprehensive health and insurance coverage (GP, hospitalization, dental, optical)
• Annual performance bonus
• Training programs, certification opportunities and training incentives
• Team-building activities and social events