> Markdown version of [/jobs/ext/3140253-senior-security-engineer-siem-xdr-pharma-hybrid](https://www.wearedevelopers.com/jobs/ext/3140253-senior-security-engineer-siem-xdr-pharma-hybrid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer (Siem/Xdr) | Pharma (Hybrid)

- **Company:** Tamarind Intelligence
- **Location:** Madrid, Spain
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cyber Security, Monitoring of Systems, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Security Information and Event Management, Systems Integration, Scripting, Cyber Threat Analysis, Microsoft Sentinel, Api Management, Security Orchestration, Automation & Response, Servicenow
- **Published:** September 29, 2026
- **Apply:** https://www.buscojobs.com.es/senior-security-engineer-siem-xdr-pharma-hybrid-en-madrid-ID-373361926

## About the Role

Proven experience developing security use cases for SIEM/XDR technologies, such as Microsoft Sentinel or Microsoft Defender.
Experience with scripting languages such as Python, PowerShell, or Bash.
Experience with API integrations and security automation.
Knowledge of security weaknesses, remediation, prioritization, change management, analysis, and triage.
Experience with reporting or ticketing platforms such as ServiceNow.
Strong analytical, problem-solving, communication, and teamwork skills.
Experience working in international and multicultural environments.
Excellent spoken and written English.
NICE TO HAVE Service Requirements
Experience with Breach & Attack Simulation (BAS) and threat scenario creation.
Security certifications such as Security , GCIH, ECIH, OSCP, or CEH.
Experience in Security Operations, Detection Engineering, or Incident Response.

## Description

We are looking for a Senior Security Engineer to join a global Cyber Intelligence & Security Operations Center (CISOC) team, focusing on security monitoring, detection engineering, and the continuous improvement of SIEM/XDR capabilities.In this role, you will design and optimize security use cases, develop automation and integrations, and collaborate with Security Detection and Incident Response teams to improve threat detection and remediation.You will also contribute to security reporting, dashboards, documentation, and the evolution of monitoring technologies.TASKS & RESPONSIBILITIES:Develop and implement security use cases for SIEM/XDR platforms.Fine-tune existing use cases to improve detection quality and reduce false positives.Develop and maintain scripts and API integrations to automate and enrich security monitoring capabilities.Support the implementation of Breach & Attack Simulation (BAS) scenarios to test and improve detection use cases.Contribute to the evolution of security monitoring technologies according to the defined roadmap.Collaborate with Security Detection and Incident Response teams to strengthen detection capabilities.Prepare and manage security monitoring reports, dashboards, and status updates.Maintain accurate documentation in line with security processes, SOPs, and working instructions.Present monitoring insights and updates to technical stakeholders and management.SKILLS:Proven experience developing security use cases for SIEM/XDR technologies, such as Microsoft Sentinel or Microsoft Defender.Experience with scripting languages such as Python, PowerShell, or Bash.Experience with API integrations and security automation.Knowledge of security weaknesses, remediation, prioritization, change management, analysis, and triage.Experience with reporting or ticketing platforms such as ServiceNow.Strong analytical, problem-solving, communication, and teamwork skills.Experience working in international and multicultural environments.Excellent spoken and written English.NICE TO HAVE Service RequirementsExperience with Breach & Attack Simulation (BAS) and threat scenario creation.Security certifications such as Security , GCIH, ECIH, OSCP, or CEH.Experience in Security Operations, Detection Engineering, or Incident Response.SCHEDULE :08h-17h from Monday to Friday (flexible)4 days by remote, 1 day office work (every thursday)CONDITIONS :Salary package based on your profile.Ticket restaurant included in-office hours.Flexible compensation plan (free of income tax) where we provide you with medical insurance, public transport ticket and childcare check.Discounts in gym network.Training catalogue.Our goal is that you are well in every way!#J-*****-Ljbffr


## Related Videos

- [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management)
- [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [AI in Production: applied AI & enterprise use cases](https://www.wearedevelopers.com/videos/100130-ai-in-production-applied-ai-enterprise-use-cases)
- [Your AI Agent is just a while loop with an API call. Let me prove it](https://www.wearedevelopers.com/videos/1988-your-ai-agent-is-just-a-while-loop-with-an-api-call-let-me-prove-it)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)