Logstash Developer Engineer – L2
BengaluruFull-time3–6 yrs10 L–₹12 L a yearPosted 4 weeks ago
Mid-level software engineering role at SISA Information Security in Bengaluru. Needs 3+ years. Pays ₹10–12 LPA.
About the role
We are looking for a hands-on Logstash Developer Engineer – L2 responsible for developing, enhancing, troubleshooting, and optimizing Logstash pipelines and Grok parsers for diverse security and infrastructure log sources. The engineer should independently handle complex parsing and ingestion issues while ensuring zero log loss, accurate ECS field mapping, and optimal pipeline performance .
What you'll do
- Develop, enhance, test, and deploy Logstash pipelines and Grok patterns for security, network, cloud, application, database, and OS log sources
- Parse and normalize logs into Elastic Common Schema (ECS) or defined SIEM schemas
- Work with Grok, Dissect, JSON, KV, Mutate, Date, Ruby and other Logstash filters
- Validate raw-to-parsed event flow and ensure all intended fields are correctly extracted and mapped
- Handle multiline, nested JSON, variable-format and high-volume log sources
What you need
- REST APIs
- Elasticsearch
- Linux
- Troubleshooting
- Root cause analysis
- Kafka
Good to have
- Python
- SQL
- Git
- AWS
- GCP
- Azure