Description & Requirements
Role Overview:
We are looking for a Senior Python Developer with 6–8 years of experience to design and implement the integration between Zeek, Suricata, and downstream systems (Kafka/Logstash). The candidate will also play a key role in developing the correlation engine, routing/enrichment pipelines, and scaling the solution for high-throughput OT security monitoring.
Mandatory Skills:
• Expert-level Python (3.7+), with proven experience in building scalable back-end services.
• Strong experience with streaming/data pipelines (, message queues, or similar).
• Familiarity with correlation engine development (rule-based, enrichment, anomaly detection).
• Experience in building microservices in Python (FastAPI, Flask, etc.).
• Strong hands-on experience with Logstash (pipeline design, filters, enrichment, and integration).
• Containerization expertise: Docker and Kubernetes (or lightweight distributions like K3s).
• Experience with Linux systems programming & administration (networking concepts, syslog, packet capture, performance tuning).
Good-to-Have Skills:
• YARA/Sigma rule integration in security pipelines.
• Elasticsearch/OpenSearch integration.
• Knowledge of data storage & indexing for high-throughput logs.
• CI/CD pipeline management and monitoring tools (Prometheus, Grafana).