SOC Analyst – ELK Stack (m/f)

About the role

We are seeking a SOC Analyst specialized in the ELK Stack to join a leading security team in Luxembourg. The role focuses on monitoring, analyzing, and responding to security events using Elasticsearch, Logstash, Kibana and Beats.

Key responsibilities

• Monitor and analyse security events through the ELK Stack.
• Investigate alerts, correlate logs and identify suspicious activities.
• Perform incident triage, qualification and escalation.
• Conduct threat‑hunting activities across Elasticsearch data.
• Create and maintain Kibana dashboards and visualisations.
• Tune detection rules to reduce false positives.
• Support forensic investigations and evidence collection.
• Document incidents and produce reports in French and English.
• Collaborate with IT and security teams during investigations.
• Contribute to SOC procedures, playbooks and continuous improvement.

Required profile

• Degree in IT or a related field.
• Experience with Elasticsearch, Logstash, Kibana and Beats.
• Background in SOC operations and security monitoring.
• Knowledge of common attack techniques and the MITRE ATT&CK framework.
• Ability to script or automate tasks (Python, Bash, PowerShell).
• Understanding of network protocols, firewalls and authentication flows.
• Comfortable analysing Windows, Linux and cloud logs.
• Fluent in French and English.
• Security certifications (e.g., Security+, eJPT) are a plus.

Required skills

• Elasticsearch
• Logstash
• Kibana
• Beats
• Python
• Bash
• PowerShell

What we offer

• Long‑term opportunity within a recognised security team.
• Collaboration with experienced experts.
• Excellent training and professional development.