> Markdown version of [/jobs/ext/1931407-senior-siem-engineer-ey-gds-spain-hybrid](https://www.wearedevelopers.com/jobs/ext/1931407-senior-siem-engineer-ey-gds-spain-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Siem Engineer - Ey Gds Spain - Hybrid - **Company:** Ernst & Young Global Limited - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Microsoft Azure, Bash Shell, Cloud Computing Security, Cyber Security, Linux, Intrusion Detection and Prevention, Python (Programming Language), Open Source Technology, Performance Tuning, Windows PowerShell, Kusto Query Language, Security Information and Event Management, Scripting, Data Ingestion, Microsoft Power Automate, Mitre Att&ck, Microsoft Sentinel, Splunk - **Published:** August 5, 2026 - **Apply:** https://www.buscojobs.com.es/senior-siem-engineer-ey-gds-spain-hybrid-en-madrid-ID-365503677 ## About the Role Strong knowledge of cloud security concepts, SIEM architectures, and the MITRE ATT&CK framework. Hands?on engineering mindset with solid troubleshooting, analytical thinking, and attention to detail. Pragmatic communicator who can translate complex technical topics into actionable recommendations for different audiences. Ownership and quality focus: audit?ready documentation, structured delivery, and continuous improvement. To Qualify for the Role 2 - + 4 years of experience in SIEM engineering (design, onboarding, use case development, tuning, and operations), ideally with Microsoft Sentinel. Hands?on experience with Azure, Windows/Linux, and scripting (e.g., Python, PowerShell, Bash) as well as automation concepts. Experience building or operating SOAR?style automations (e.g., Logic Apps / playbooks) in a security operations context. English at least B2 (written and spoken) is required. Ideally you'd also have Splunk experience (SPL, data onboarding, correlations, dashboards) and/or open-source SIEM experience (e.g., Elastic/ELK, Wazuh). Experience working in regulated environments and familiarity with operational processes (ITSM, incident workflow alignment). Relevant certifications (e.g., SC-200, AZ?500, or comparable cloud/security certifications) are a plus. #J-*****-Ljbffr ## Description SIEM Engineer - Senior - EY GDS Spain - HybridAs a Senior SIEM Engineer, you are part of the EY Cyber Security team, working in a Threat Detection & Response (TDR) environment with a strong focus on Microsoft Sentinel and XDR.You design, integrate, and operate SIEM use cases and automations and support clients in securely operating modern cloud-native security platforms.Knowledge of Splunk or open-source SIEM ecosystems (e.g., Elastic/ELK, Wazuh) is considered a strong advantage.Your Key ResponsibilitiesIntegrate data sources into Microsoft Sentinel (cloud, identity, endpoint, network, and on-prem) and ensure data quality and normalization.Design, implement, and operate analytics rules, SIEM use cases, and hunting queries (KQL; SPL experience is a plus).Develop and maintain playbooks and automations using Azure Logic Apps to enrich, orchestrate, and standardize response workflows.Act as a technical subject matter expert for SIEM and Microsoft Sentinel/XDR solutions and provide hands?on guidance to stakeholders.Optimize SOC OperationsContinuously optimize detection, response, and automation capabilities (tuning, false?positive reduction, performance, and maintainability).Contribute to engineering best practices such as documentation, repeatable deployments, and (where applicable) detection/content as code.Skills and Attributes for SuccessStrong knowledge of cloud security concepts, SIEM architectures, and the MITRE ATT&CK framework.Hands?on engineering mindset with solid troubleshooting, analytical thinking, and attention to detail.Pragmatic communicator who can translate complex technical topics into actionable recommendations for different audiences.Ownership and quality focus: audit?ready documentation, structured delivery, and continuous improvement.To Qualify for the Role2 - + 4 years of experience in SIEM engineering (design, onboarding, use case development, tuning, and operations), ideally with Microsoft Sentinel.Hands?on experience with Azure, Windows/Linux, and scripting (e.g., Python, PowerShell, Bash) as well as automation concepts.Experience building or operating SOAR?style automations (e.g., Logic Apps / playbooks) in a security operations context.English at least B2 (written and spoken) is required.Ideally you'd also haveSplunk experience (SPL, data onboarding, correlations, dashboards) and/or open-source SIEM experience (e.g., Elastic/ELK, Wazuh).Experience working in regulated environments and familiarity with operational processes (ITSM, incident workflow alignment).Relevant certifications (e.g., SC-200, AZ?500, or comparable cloud/security certifications) are a plus.#J-*****-Ljbffr ## Related Videos - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Spanish Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/353-spanish-business-culture-and-etiquette)