job description
Join KMC Solutions as an Elastic Security Engineer and play a pivotal role in safeguarding our digital infrastructure. This remote position is ideal for a security professional passionate about data integrity, threat detection, and system resilience. You will ensure that priority security data sources are seamlessly onboarded, parsed, normalized, and enriched, making them actionable for our security teams.
Based in the vibrant locales of Bali, you’ll collaborate with a global team to monitor, retain, and optimize security data, ensuring our systems remain robust against evolving threats. If you thrive in a dynamic environment and are eager to contribute to cutting-edge security solutions, this role is for you.
Responsibility
- Design, implement, and maintain Elasticsearch-based security data pipelines.
- Onboard and normalize security logs from diverse sources (SIEM, endpoints, cloud platforms).
- Develop and refine parsing rules to enrich security data for threat detection.
- Monitor data integrity and retention policies to comply with security standards.
- Collaborate with SOC teams to optimize query performance and alerting mechanisms.
- Automate data ingestion and transformation processes using scripting (Python, Bash).
- Troubleshoot and resolve issues related to data indexing, storage, and retrieval.
- Stay updated on emerging threats and Elastic Stack best practices.
Qualifications
- Bachelor’s degree in Computer Science, Cybersecurity, or related field.
- 3+ years of experience with Elasticsearch, Logstash, and Kibana (ELK Stack).
- Proficiency in security data normalization (e.g., CIM, ECS).
- Strong scripting skills (Python, PowerShell, or Bash).
- Experience with SIEM tools (Splunk, QRadar, or similar).
- Knowledge of cloud security (AWS, Azure, or GCP).
- Familiarity with compliance frameworks (ISO 27001, NIST, GDPR).
- Excellent problem-solving and communication skills.