Cybersecurity Operations Engineer
Role details
Job location
Tech stack
Job description
Cybersecurity team is looking for a Security Operations Senior Engineer based out of Madrid, working in a hybrid model. You will play a key role in strengthening the maturity of our Security Operations function across ODS product environments. You will help protect critical banking platforms and services across geographies, with a strong focus on vulnerability management, threat detection, incident response and proactive security improvement. This is a highly dynamic role for a senior professional who enjoys solving different challenges every day, bringing new ideas and contributing to a continuously evolving cybersecurity capability.We're shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:* Monitor, investigate and correlate security events and alerts using SIEM platforms such as Splunk, QRadar, Microsoft Sentinel and CrowdStrike/Falcon.* Lead and support incident response activities, including triage, containment, coordination, root cause analysis and basic forensic investigation.* Own and improve vulnerability management processes, including identification, prioritization, remediation follow-up and reporting, while bringing new ideas to increase team maturity.* Manage and operate security tools such as DLP, firewalls or proxys ensuring proper configuration, analyzing alerts and events. Propose and implement adjustments to policies and rules to enhance threat detection and prevention capabilities increasing effectiveness and reducing the exposure surface.* Collaborate with Cyber Threat Intelligence / CTU and CERT-related teams to anticipate threats, enrich detections and improve the organization's overall security posture.* Design, implement and optimize playbooks in SOAR platforms to accelerate and standardize security operations actions.* Contribute to threat analysis, event correlation, security automation, executive
Requirements
A leading financial institution in Madrid is seeking a Senior Cybersecurity Operations Engineer to strengthen security across its digital platform. This role involves monitoring security events, leading incident response, and managing vulnerability processes. Candidates should have 6-10 years of experience in cybersecurity with strong knowledge of incident response and vulnerability management. Fluency in Spanish is required, along with English B2-C1 skills. The position offers a hybrid work model and various competitive benefits., * 6-10 years of experience in cybersecurity, preferably in Security Operations Center (SOC).
- Hands-on experience in incident response, alert management, and threat analysis.
- Strong knowledge of vulnerability management.
Responsabilidades
- Monitor and investigate security events using SIEM platforms.
- Lead incident response activities including triage and root cause analysis.
- Own and improve vulnerability management processes., Incident response Vulnerability management Cyber Threat Intelligence SIEM tools Collaboration, and technical reporting, and participation in red team / blue team exercises and penetration testing initiatives.WHAT YOU'LL BRINGOur people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We're enabling teams to go beyond by valuing who they are and empowering what they bring.The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.Professional Experience* 6-10 years of experience in cybersecurity, preferably in Security Operations Center (SOC) or Security Operations environments. (Required)* Hands-on experience in incident response, alert management, vulnerability management and threat analysis across enterprise environments. (Required)* Experience in regulated sectors such as banking, financial services or consulting environments supporting large organizations. (Preferred)* Experience in participating in an on-call rotation. (Preferred)Hard Skills* Strong knowledge of vulnerability management, incident response, Cyber Threat Intelligence / CTU, SIEM tools and SOAR platforms; understanding of networks, systems and security architecture. (Required)* Experience or working knowledge in ethical hacking / pentesting, including tools such as Burp Suite or OWASP ZAP. (Required)* Cloud security exposure in AWS, Azure or GCP is a plus. (Preferred)* Scripting or programming experience in Python, Bash, PowerShell, JavaScript, TypeScript or similar, with the ability to automate security tasks and workflows. (Preferred)Languages* Spanish (Required)* English B2-C1, with the ability to participate in meetings and communicate effectively in international environments. (Required)Soft Skills* Strong analytical thinking and sound judgment under pressure, especially during
Benefits & conditions
incident response scenarios.* Broad technical perspective, curiosity and continuous improvement mindset, with the ability to bring ideas and raise the maturity level of the team.* Excellent collaboration and stakeholder management skills, including diplomacy, clear communication and the ability to work with highly specialized and junior profiles alike.* This role requires a senior professional who can operate with autonomy across a broad security scope and collaborate effectively with L2/L3 stakeholders.WE VALUE YOUR IMPACT****Your contribution matters, and it's recognized. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver. But we know rewards go beyond numbers.* We offer more than just a paycheck-our benefits are designed to support your life, your goals and your well-being, now and into the future.* Your health is our priority. Through BeHealthy, our global wellness programme, we promote **Holistic