Poste de Threat Detection Engineer – Splunk Developer chez Euroclear en Pologne

Description du Poste

Entreprise : Euroclear
Localisation : Pologne
Salaire Attendu : À discuter

Cette offre d’emploi présente une opportunité passionnante au sein d’Euroclear, une entreprise reconnue dans le secteur des services financiers, étroitement liée aux infrastructures de marché de capitaux.

Aperçu de l’Entreprise

Euroclear joue un rôle crucial dans la stabilisation des marchés financiers en connectant plus de 2 000 institutions financières à travers le monde. Sa mission inclut la simplification des processus transactions, la réduction des coûts et la gestion des risques liés aux opérations financières. L’entreprise s’investit également dans la transition vers un système financier mondialurable.

Le Rôle de Threat Detection Engineer

Le poste de Threat Detection Engineer, au sein de l’équipe de Cyber Defense Center, se concentre sur la réduction des risques liés aux cybersécurités en surveillant les menaces potentielles contre les services d’Euroclear. Le rôle implique l’interaction avec divers clients pour comprendre et définir les exigences liées à la détection des menaces.

Responsabilités Principales :

• Collaborer avec l’équipe d’intégration des logs pour assurer la conformité avec les processus standards de Splunk.
• Développer et peaufiner des règles de corrélation pour améliorer les capacités de détection.
• Créer et maintenir des tableaux de bord, des rapports et des alertes.
• Former et coacher une équipe sur les meilleures pratiques liées aux outils SIEM.
• Évaluer et améliorer les processus existants pour augmenter l’efficacité.
• Fournir des conseils techniques sur les systèmes de sécurité.
• Prioriser et coordonner les demandes de détection des menaces.

Qualifications Techniques :

Les candidats doivent posséder des compétences spécifiques en matière de cybersécurité et une expérience significative dans le développement de cas d’utilisation SIEM. Les compétences incluent :

• Maîtrise du *Search Processing Language* (SPL) de Splunk.
• Connaissance approfondie de *Splunk Enterprise* et *Splunk Enterprise Security*.
• Compréhension des modèles d’information communs de Splunk et de la normalisation des logs.
• Compétences en communication en anglais, tant à l’écrit qu’à l’oral.

Atouts Souhaités :

Des certifications supplémentaires comme Splunk Core Certified Power User ou d’autres certifications en sécurité (CEH, CISSP, etc.) sont considérées comme des plus.

Compétences Interpersonnelles :

Les qualités personnelles recherchées comprennent :

• Capacité d’analyse et résolution de problèmes dans des contextes complexes.
• Compétences en documentation et gestion du temps.
• Capacité à communiquer des concepts complexes de manière claire.
• Esprit d’équipe et disposition à travailler de manière autonome.

Pourquoi Rejoindre Euroclear ?

Euroclear offre un environnement de travail international, où l’apprentissage et le développement sont favorisés. Les employés bénéficient de salaires compétitifs et de conditions de travail flexibles, favorisant un équilibre entre travail de bureau et travail à distance.

Engagement envers l’Inclusion :

Euroclear attache une grande importance à la diversité et à l’inclusion, s’efforçant de créer un environnement de travail où chaque employé se sent valorisé, indépendamment de sa race, religion, genre ou tout autre aspect personnel.

Application

Pour postuler à cette opportunité unique, visitez le lien suivant : Postulez dès maintenant !.

Cette description met en lumière non seulement les compétences requises pour le poste, mais aussi l’engagement d’Euroclear envers ses employés et la sécurité des systèmes financiers.

---

📅 Date de publication de l’offre : Sun, 25 May 2025 05:01:12 GMT

🏢 Entreprise : Euroclear

📍 Lieu : Polska

💼 Intitulé du poste : Threat Detection Engineer – Splunk Developer

💶 Rémunération proposée :

📝 Description du poste : Job Category: Information TechnologyJob Description:Division: CISO
Cyber Defense Center is part of the Chief Information Security Officer Office. The main responsibility of the team is to reduce the risk of Euroclear cyber threat surface by monitoring for malicious intent targeted at Euroclear’s services, it’s supporting assets and people. We do this through the Cyber Threat Management (CTM) capabilities, Security Operations Centre (SOC) which includes monitoring and Cyber Incident & Response Team, Detection & Response Engineering Team. This includes cyber threat intelligence, brand and digital footprint monitoring, security incident and event monitoring, cyber analytics, incident management and forensic analysis.CDC supports capabilities within the security domain and acts as subject matter expert across all divisions in the company as well as interacts with external stake holders, including customers, oversight bodies, threat intelligence providers, and third parties.The Detection & Response Engineering team is comprised of –

• Detection Engineers/Splunk Developers – who implement and maintain threat detections capabilities.
• SOAR developers – who develop response capabilities via playbooks, automation etc.

Role:

• Interact with the different customers to capture and define requirements for the development and testing of the threat detection capabilities
• Cooperate with log source onboarding team to assure correct log source onboarding and log mapping to data models according to Splunk standard processes
• The development and tuning and continuous improvement of correlation rules
• Develop and maintain dashboards, reports, and alerts
• Create Splunk Knowledge Objects to address customers’ needs in context of using Splunk as security tool
• Prepare correlation search tests, conduct tests, and document evidence from test that shows correlation search addresses scenario described in use case
• Responsible for the creation of procedures, high-level/low-level documentation, implementation of processes and development of staff in relation to SIEM detection logic
• Coach a team (from a technical perspective); review work outputs and provide quality assurance
• Analyses and identifies areas of improvement with existing processes, procedures, and documentation
• Demonstrates how to use SIEM & Enterprise Security products to both technical/non-technical personnel
• Provides expert technical advice and counsel in the design, monitoring and improvement of SIEM security systems
• Prioritize and coordinate backlog of threat detection requests, making sure we have a healthy balance between defect resolution and new features

Qualifications:Technical Skills:

• In depth experience in development and maintenance of SIEM use cases
• Fluent in Splunk’s search processing language (SPL)
• Excellent knowledge of Splunk Enterprise and Splunk Enterprise Security
• Sound knowledge about Splunk Common Information Model and log normalization using Data Models
• Solid understanding of cybersecurity technologies, protocols, and applications
• Excellent English communication skills (written and oral)!

Assets:

• Splunk Core Certified (Advanced)Power User (essential)
• Splunk Certified Developer (nice to have)
• Splunk Enterprise Certified Admin (nice to have)
• Splunk Enterprise Security Certified Admin (nice to have)
• Any other Security Certifications (e.g. CEH, GIAC, CISSP, OSCP …)

Soft Skills:

• Strong analytical skills to evaluate sophisticated multivariate problems and find a systematic approach to gain a quick resolution, often under stress
• Strong problem solving, documentation, process execution, time management and organizational skills.
• Ability to communicate sophisticated information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means
• Fast and independent learner, with ambition to self-improve
• At ease in a fast-changing environment, flexible and pragmatic, open-minded
• Accurate, acting with attention to details
• Client focus and delivery oriented
• A team-focused mentality with ability to work & collaborate effectively in a team environment
• Good leadership and communication skills, whether on the field, in the team or with management: you are a keen standout colleague and coordinate work among people from different areas or divisions. A good relationship builder with strong diplomacy skills
• Ability to work autonomously

#LI-NS1About Us:Why join usEmbark on your new adventure at Euroclear, and work at the heart of the global capital markets. We connect over 2,000 financial institutions across the globe. As an open and resilient infrastructure, we contribute to the stability of the financial markets. We help clients cut through complexity, lower costs, and mitigate risks of financial transactions. At Euroclear, we have the clear ambition to use our key role to facilitate and accelerate a sustainable global financial system.What We Offer:

• Work closely with inspiring, supportive and engaged colleagues from more than 80 different countries.
• Practice your talents in a highly professional international environment.
• Join a learning and development environment with an emphasis on knowledge sharing and training.
• Competitive salary and comprehensive benefits.

New ways of workingFind your own optimal balance within our hybrid working model, where you can connect at the office and also benefit from remote working.Great Place to Work for AllWe are committed to creating an inclusive culture that celebrates diversity and strives to be a Great Place to Work for All. All qualified applicants will be considered for employment, regardless of any aspect that makes them unique (including race, religion, national origin, gender, sexual orientation, age, marital status, pregnancy, disability, …). If you need any specific accommodation due to disability or any other reason, you can let the recruiter know during your application process.About the Team: As a global critical financial infrastructure, the protection of Euroclear information and assets is fundamental to the companys’ business. Security is at the core of our services, firmly embedded in the management systems and processes of the company. You will be joining our Chief Information Security Office (CISO) in charge of putting in place the required controls to adequately and effectively protect our information assets.

➡️ Candidater en ligne

---

🔎 Offre d’emploi vérifiée et enrichie selon la ligne éditoriale de l’Association Artia13 : éthique, inclusion, transparence et vigilance contre les annonces trompeuses.

🌍 Retrouvez d’autres offres sur artia13.world