> Markdown version of [/jobs/ext/4003636-security-engineer-siem](https://www.wearedevelopers.com/jobs/ext/4003636-security-engineer-siem). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer (SIEM)

- **Company:** Next Link
- **Location:** Estadísticas para este empleo, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Microsoft Azure, Bash Shell, Cyber Security, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Security Information and Event Management, Scripting, Cyber Threat Analysis, Information Technology, Microsoft Sentinel, Api Management, Servicenow
- **Published:** October 29, 2026
- **Apply:** https://www.adzuna.es/details/5944894206

## About the Role

* Degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related technical field; alternatively, equivalent relevant professional experience.
 * Certifications such as Microsoft Sentinel/Defender certifications, Security+, CE, GCIH, ECIH, OSCP, or CEH are desirable but not mandatory.
 * Demonstrated hands-on experience working with Microsoft Sentinel SIEM in Azure environments, including the development and fine-tuning of SIEM/XDR security use cases using Microsoft Sentinel, Microsoft Defender, or comparable technologies.
 * Scripting experience with Python, PowerShell, Bash, or similar, including API integrations and automation of security monitoring capabilities.
 * Experience with Breach & Attack Simulation (BAS) and simulated threat scenarios to test and improve detection use cases.
 * Experience creating and managing security reports, dashboards, and ticketing workflows, ideally using ServiceNow or comparable platforms.
 * Good knowledge of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage.
 * Ability to work within defined security processes, SOPs, documentation requirements, and cross-functional Security/Risk environments.
 * Strong analytical thinking, communication, problem-solving, results orientation, agility, and teamwork skills.
 * Excellent written and spoken English, with experience working in virtual, international, and multicultural environments.

## Description

Nextlink is looking for a SIEM Engineer to join our team and collaborate closely with one of our most recognised clients in the pharmaceutical sector.

You will join the Cyber Intelligence & Security Operations Center, focusing on security monitoring and detection capabilities through SIEM and XDR technologies.

The role combines hands-on security engineering, use case development, automation, detection improvement, reporting, and collaboration with Security Detection, Incident Response, Risk, and Information Security teams.

Main Responsibilities:

 * Design, implement, and continuously improve SIEM/XDR security use cases, including fine-tuning to reduce false positives.
 * Develop and maintain scripts, integrations, and APIs to enrich SIEM/XDR capabilities and automate security monitoring activities.
 * Support the implementation and maintenance of simulated threats / BAS scenarios to test and improve detection use cases.
 * Contribute to the evolution of security technologies in line with the defined roadmap and improve detection capabilities together with Security Detection and Incident Response teams.
 * Act as a point of contact for security monitoring reports and dashboards, presenting status and updates to technical experts and management.
 * Follow defined frameworks, processes, SOPs, and working instructions, ensuring compliant and up-to-date documentation.
 * Collaborate with Risk and Information Security teams on identified risks, remediation, prioritisation, analysis, triage, and security monitoring improvements.