> Markdown version of [/jobs/ext/1934134-cyber-soc-with-german-manager-ey-gds-spain-hybrid](https://www.wearedevelopers.com/jobs/ext/1934134-cyber-soc-with-german-manager-ey-gds-spain-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Soc With German - Manager - Ey Gds Spain - Hybrid - **Company:** Ernst & Young Global Limited - **Location:** Madrid, Spain - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Microsoft Online Services, Cloud Computing Security, Cyber Security, Python (Programming Language), Windows PowerShell, Security Software, Scripting, Data Ingestion, Mitre Att&ck, QRadar, Cybercrime, Splunk - **Published:** August 5, 2026 - **Apply:** https://www.buscojobs.com.es/cyber-soc-with-german-manager-ey-gds-spain-hybrid-en-madrid-ID-365579275 ## About the Role Customer Service oriented - meets commitments to customers; seeks feedback to identify improvement opportunities Expertise in content management in MS Sentinel/Defender Good knowledge in threat modelling; experience in creating use cases under Cyber kill chain and Mitre attack framework Expertise in integrating critical devices/applications, including unsupported (in-house built) by creating custom parsers Detailed experience/expertise in Sentinel Develop a migration plan from Splunk/QRadar/LogRhythm to MS Sentinel Deep understanding of how to implement best practices for designing and securing Azure platform Experience advising on Microsoft Cloud Security capabilities across Azure platform Configure data ingestion types and connectors Analytic design and configuration of the events and logs being ingested Develop, automate, and orchestrate tasks (playbooks) with logic apps based on certain events Experience in other cloud native security platforms like AWS and GCP is a plus Scripting knowledge (Python, Bash, PowerShell) Extensive knowledge of different security threats Good knowledge and experience in Security Monitoring Good knowledge and experience in Cyber Incident Response Languages: German C1 or above Qualifications B. Tech. /B.E. with sound technical skills Strong command of verbal and written English language Demonstrate both technical acumen and critical thinking abilities Strong interpersonal and presentation skills Certification in Azure (any other cloud vendor certification is a plus) ## Description Cyber SOC with German - Manager - EY GDS Spain - HybridLocation: MalagaOther locations: Primary Location OnlyRequisition ID: *******Cyber Security SOC Manager (German Speaker) - EY GDS Spain - HybridThe opportunityWe're looking for a Managing Consultant with expertise in Microsoft XDR solutions.This is a fantastic opportunity to be part of a leading firm whilst being instrumental in the growth of a new service offering.Key ResponsibilitiesArchitecting and implementation of cloud security monitoring platforms MS Sentinel/Defender XDRResearch, develop and implement use cases in Sentinel/Defender XDR within the solution studio environment and managing the solution studioProvide consulting to customers during the testing, evaluation, pilot, production, and training phases to ensure a successful deploymentPerform as the subject matter expert on Cloud Security solutions for the customer, using the capabilities of the solution in the daily operational work for the end customerSecure overall cloud environments by applying cybersecurity tools and best practicesAdvise customers on best practices and use cases on how to use this solution to achieve customer end state requirementsDevelop content which includes processes for automated security event monitoring and alerting along with corresponding event response plans for systemsSkills and AttributesCustomer Service oriented - meets commitments to customers; seeks feedback to identify improvement opportunitiesExpertise in content management in MS Sentinel/DefenderGood knowledge in threat modelling; experience in creating use cases under Cyber kill chain and Mitre attack frameworkExpertise in integrating critical devices/applications, including unsupported (in-house built) by creating custom parsersDetailed experience/expertise in SentinelDevelop a migration plan from Splunk/QRadar/LogRhythm to MS SentinelDeep understanding of how to implement best practices for designing and securing Azure platformExperience advising on Microsoft Cloud Security capabilities across Azure platformConfigure data ingestion types and connectorsAnalytic design and configuration of the events and logs being ingestedDevelop, automate, and orchestrate tasks (playbooks) with logic apps based on certain eventsExperience in other cloud native security platforms like AWS and GCP is a plusScripting knowledge (Python, Bash, PowerShell)Extensive knowledge of different security threatsGood knowledge and experience in Security MonitoringGood knowledge and experience in Cyber Incident ResponseLanguages: German C1 or aboveQualificationsB. Tech./B.E. with sound technical skillsStrong command of verbal and written English languageDemonstrate both technical acumen and critical thinking abilitiesStrong interpersonal and presentation skillsCertification in Azure (any other cloud vendor certification is a plus)BenefitsEmpowering Career Development: Unlock your potential with tailored training and development programs designed to elevate your skills and propel your career forwardFlexible Work?Life Integration: Enjoy the freedom of a hybrid work model, allowing you to blend professional responsibilities with personal passionsComprehensive Well?Being Programs: Prioritize your health with extensive wellness initiatives, including psychological support sessions and health resourcesMeaningful Volunteering Opportunities: Make a difference in your community through engaging volunteering programs and build connections with like?minded colleaguesRecognized Performance and Rewards: Celebrate achievements with recognition programs that honor individual and team successesJoin us at EY GDS Spain, where your journey is supported, your contributions are celebrated, and your future is bright.If you are interested in being part of our team, we kindly invite you to submit your CV in English to apply for this position.The exceptional EY GDS experience.It's yours to build.#J-*****-Ljbffr ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Oops! Stories of supply chain shenanigans](https://www.wearedevelopers.com/videos/245-oops-stories-of-supply-chain-shenanigans) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)