Izertis is a multinational technology consultancy firm specializing in digital transformation, including services in AI, cybersecurity, cloud computing, and blockchain. Founded in Spain and listed on the BME Growth market, the company has established a significant global footprint, providing innovative technological solutions to a wide array of industries.

Headquartered in Gijón, Izertis maintains a robust presence throughout Spain with offices in major hubs like Madrid and Barcelona. The company is recognized for its dynamic work environment and commitment to professional development, offering numerous opportunities for international talent in high-tech roles. Their flexible work policies and diverse project portfolio make them a compelling choice for professionals looking to build a career in the Spanish tech sector.

Founded in 1996 in Gijón, Izertis started as a regional IT provider before expanding into a global consultancy. The company went public on the BME Growth market in 2019 to accelerate its international growth strategy.

For international professionals

Publicly traded on the BME Growth market, ensuring corporate transparency and stability.
Offers a broad range of technical roles in cutting-edge fields like AI, Data Science, and Cybersecurity.
Maintains a strong regional presence across Spain, allowing for various relocation options beyond the capital.
Frequently hires for positions requiring English proficiency, facilitating integration for international professionals.

Data Engineer for Cognitive SIEM

Izertis

This job was originally posted in Spanish and automatically translated to English.

Job Description

At izertis, we are looking for a Data Engineer specializing in cybersecurity to participate in the design, construction, and evolution of a cognitive platform oriented towards critical environments, defense, classified infrastructures, and SOC operations.

You will be responsible for converting heterogeneous, scattered, and non-normalized events into structured, contextualized, and actionable information.

If you have a minimum of 2 years of experience in data engineering, systems integration, observability platforms, or SIEM environments and are interested in a new opportunity, apply now!

WHAT WILL YOU DO?

* Your main mission will be to design and implement processes for the ingestion, normalization, enrichment, correlation, quality, and traceability of security data, allowing events from multiple sources to be used by correlation engines, threat intelligence, SOC dashboards, and explainable artificial intelligence capabilities.
* You will act as a bridge between technical security sources, the SIEM, threat intelligence, the ARES ontology, and the AI-based cognitive layer.
* You will design, build, and maintain pipelines for the ingestion of events from multiple sources, including corporate SIEMs such as Microsoft Sentinel, Wazuh, Elastic, Graylog, or Splunk; network sensors such as Zeek, Suricata, or IDS/IPS; Windows and Linux operating systems; Sysmon, auditd, journald, or rsyslog events; OpenShift or Kubernetes platforms; EDR, antivirus, or antimalware systems; vulnerability management tools such as Nessus, OpenVAS, Grype, Trivy, Clair, or OpenSCAP; threat intelligence sources such as MISP, OpenCTI, or IOC feeds; as well as monitoring tools such as Zabbix, Prometheus, Grafana, Loki, or Maximo, and logs from applications, API Gateway, IAM, Keycloak, firewalls, VPN, and proxies.

WHAT DO YOU NEED?

Education: University Degree in Computer Engineering, Telecommunications, or similar.

Required Experience:

* Knowledge of databases
* Knowledge of Python and SQL
* Knowledge of Docker and Kubernetes
* Knowledge of data analytics
* Knowledge of SOC

Languages: English level C1

DESIRABLE

* Knowledge of observability tools such as Prometheus, Grafana, Loki, or OpenTelemetry.
* Knowledge of SIEM tools such as Wazuh, Sentinel, Splunk, or Elastic Security.
* Threat intelligence platforms such as MISP or OpenCTI.
* Vulnerability analysis tools.
* Security in Kubernetes environments.
* Compliance with ENS or CCN regulations.
* Use of graph databases or knowledge models.

SOFT SKILLS

* Analytical capacity and critical thinking
* Detail-oriented
* Organization and time management
* Responsibility and commitment to the task following methodological and quality standards
* Teamwork

WHERE WOULD WE LIKE YOU TO BE?

The functions will be carried out at the client's offices in Madrid, under a hybrid work model (60% remote work).

WHAT CAN WE OFFER YOU?

Permanent contract.

Salary according to your experience and expectations.

Flexible schedule with an intensive workday on Fridays.

Intensive workday during July and August (8:00 to 15:00) for better work-life balance.

Flexible remuneration: health insurance, restaurant vouchers, childcare vouchers, or transport.

Free English classes to improve or reinforce your level.

Access to a wide benefits platform with discounts on flights, hotels, fashion, technology, home, and more.

22 working days of vacation, your birthday, and December 24th and 31st.

GET TO KNOW IZERTIS

At Izertis, we drive the digital transformation of companies, organizations, and people through tailored, innovative, and impactful technological solutions.

Founded in 1996 and approaching 30 years of history, Izertis is part of the BME Continuous Market and is consolidated as one of the 1,000 fastest-growing companies in Europe.

Currently, we are more than 2,300 professionals distributed across offices in Europe, America, and Africa, with a presence in more than 50 countries, where we provide services through a wide portfolio of solutions: Software Engineering, Consultancy & Governance, Cloud & Infrastructure, Cybersecurity, IA & Data & Emerging Technologies, CX & Business Solutions, among other enabling technologies.

Would you like to be part of our team? We would love to meet you!

View original advert (Spanish)

Desde izertis buscamos un Data Engineer especializado en ciberseguridad para participar en el diseño, construcción y evolución de una plataforma cognitiva orientada a entornos críticos, defensa, infraestructuras clasificadas y operaciones SOC.

Serás responsable de convertir eventos heterogéneos, dispersos y no normalizados en información estructurada, contextualizada y accionable.

Si tienes mínimo 2 años de experiencia en ingeniería de datos, integración de sistemas, plataformas de observabilidad o entornos SIEM y te interesa una nueva oportunidad, ¡inscríbete!

¿QUÉ HARÁS?

* Tu misión principal será diseñar e implementar los procesos de ingesta, normalización, enriquecimiento, correlación, calidad y trazabilidad de datos de seguridad, permitiendo que los eventos procedentes de múltiples fuentes puedan ser utilizados por motores de correlación, inteligencia de amenazas, dashboards SOC y capacidades de inteligencia artificial explicativa.
* Actuarás como puente entre las fuentes técnicas de seguridad, el SIEM, la inteligencia de amenazas, la ontología ARES y la capa cognitiva basada en IA.
* Deberás diseñar, construir y mantener pipelines para la ingesta de eventos procedentes de múltiples fuentes, entre ellas SIEM corporativos como Microsoft Sentinel, Wazuh, Elastic, Graylog o Splunk, sensores de red como Zeek, Suricata o IDS/IPS, sistemas operativos Windows y Linux, eventos de Sysmon, auditd, journald o rsyslog, plataformas OpenShift o Kubernetes, sistemas EDR, antivirus o antimalware, herramientas de gestión de vulnerabilidades como Nessus, OpenVAS, Grype, Trivy, Clair u OpenSCAP, fuentes de inteligencia de amenazas como MISP, OpenCTI o feeds IOC, así como herramientas de monitorización como Zabbix, Prometheus, Grafana, Loki o Maximo y logs de aplicaciones, API Gateway, IAM, Keycloak, firewalls, VPN y proxies.

¿QUÉ NECESITAS?

Formación: Grado Universitario en Ingeniería Informática, Telecomunicaciones o similar.

Experiencia necesaria:

* Conocimientos en BBDD
* Conocimientos en Python y SQL
* Conocimientos en Docker y Kubernetes
* Conocimientos en analítica de datos
* Conocimientos en SOC

Idiomas: inglés nivel C1

VALORABLE

* Conocimientos en herramientas de observabilidad como Prometheus, Grafana, Loki u OpenTelemetry.
* Conocimientos en herramientas SIEM como Qazuh, Sentinel, Splunk o Elastic Security.
* Plataformas de inteligencia de amenazas como MISP o OpenCTI.
* Herramientas de análisis de vulnerabilidades.
* Seguridad en entornos Kubernetes
* Cumplimiento de normativas ENS o CCN
* Uso de BBDD de grafos o modelos de conocimientos.

SOFT SKILLS

* Capacidad de análisis y pensamiento crítico
* Enfocado al detalle
* Organización y gestión del tiempo
* Responsabilidad y compromiso con la tarea siguiendo los estándares metodológicos y de calidad
* Trabajo en equipo

¿DÓNDE NOS GUSTARÍA QUE ESTUVIERAS?

Las funciones se desempañarán en las oficinas de cliente en Madrid, bajo una modalidad híbrida de trabajo (60% de teletrabajo).

¿QUÉ PODEMOS OFRECERTE?

Contratación indefinida.

Salario acorde a tu experiencia y expectativas.

Horario flexible con jornada intensiva los viernes.

Jornada intensiva durante julio y agosto (8:00 a 15:00) para una mejor conciliación.

Retribución flexible: seguro médico, ticket restaurante, cheque guardería o transporte.

Clases gratuitas de inglés para mejorar o reforzar tu nivel.

Acceso a una amplia plataforma de beneficios con descuentos en vuelos, hoteles, moda, tecnología, hogar y más.

22 días laborables de vacaciones, el día de tu cumpleaños y los días 24 y 31 de diciembre.

CONOCE IZERTIS

En Izertis impulsamos la transformación digital de empresas, organizaciones y personas a través de soluciones tecnológicas a medida, innovadoras y con impacto.

Fundada en 1996 y próxima a cumplir 30 años de historia, Izertis forma parte del Mercado Continuo BME y se consolida como una de las 1000 empresas que más rápido crecen en Europa.