Cyber security engineer in SIEM

Amaris Consulting | Part of Mantu; Barcelona; Hybrid; EUR 60,000 - 85,000; Full time

Benefits offered by this job

Гибкий график

Удаленная работа

Учебные платформы (Udemy)

Сертификации и обучение

Социальные льготы

Job summary

Amaris Consulting, где входит в состав Mantu, ищет инженера по кибербезопасности с фокусом на SIEM. Ваша задача — развивать новые кейсы, интеграции и скрипты для SIEM/XDR, поддерживать и улучшать существующую инфраструктуру.

Работа в международной команде, гибкие условия, обучение и сертификации. Требуется 3–5 лет опыта в кибербезопасности, знание Microsoft Sentinel/Azure, навыки Python/PowerShell/Bash и отличное владение английским языком.

Qualifications

• 3–5 лет опыта в кибербезопасности, желательно в SOC/Cyber Intelligence.
• Опыт работы с Microsoft Sentinel/Azure и разработкой кейсов для SIEM/XDR.
• Навыки скриптинга: Python, PowerShell, Bash; интеграции через API.
• Знание BAS и инструментов отчетности; английский свободно.
• Хорошие коммуникационные навыки и работа в международной команде.

Responsibilities

• Реализация новых security use cases на SIEM/XDR для повышения обнаружения.
• Тюнинг существующих use cases для снижения FP и улучшения качества тревог.
• Разработка скриптов и интеграций для SIEM/XDR технологий.
• Поддержка и оптимизация существующих скриптов и рабочих процессов.
• Поддержка тестирования технологий через моделируемые угрозы.
• Сотрудничество с командой Security Detection и Incident Response.
• Подготовка отчетов и дашбордов; соблюдение BI-рамок и SOP.
• Работа с командами риска и информационной безопасности по статусу мониторинга.

Skills

Python

PowerShell

Bash

API integrations

SIEM/XDR

English fluent

Analytical thinking

Tools

Microsoft Sentinel

Azure

Defender

ServiceNow

BI framework

Job description

Описание

Take your career to the next level with Amaris Consulting as a Cybersecurity Engineer (SIEM). Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide, and an agile environment by planning the kickoff and follow up on projects. Join Amaris Consulting, where you can develop your potential and make a difference within the company.

Задачи

Implement new security use cases on SIEM/XDR platforms to enhance detection coverage Fine-tune existing use cases to reduce false positives and improve alert quality Develop new scripts and integrations to leverage and enrich SIEM/XDR technologies Maintain and optimize existing scripts, integrations, and automation workflows Support the implementation and maintenance of simulated threats to automatically test and enhance use cases Contribute to the evolution of current technologies according to the defined security roadmap Collaborate closely with the Security Detection and Incident Response team to improve detection capabilities Act as a point of contact for managing and delivering various reports and dashboards Understand and follow the BI framework, ensuring compliant documentation and adherence to SOPs and working instructions Work with various risk and information security teams to present security monitoring status and updates to technology SMEs and management

Требования

3–5 years of professional experience in Cybersecurity, ideally within Security Operations / Cyber Intelligence teams Demonstrated hands‑on experience working with Microsoft Sentinel SIEM and Azure environments Proven experience designing and developing security use cases for SIEM/XDR technologies (e.g. Microsoft Sentinel, Microsoft Defender; certifications are a plus) Strong programming skills in scripting languages such as Python, PowerShell, and/or Bash, including API integrations Desired experience with Breach & Attack Simulation (BAS) tools and threat scenario creation Experience with reporting/ticketing platforms, preferably ServiceNow Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage Excellent spoken and written English (fluent level) Strong analytical thinking, problem-solving mindset, and results orientation Good communication skills and the ability to work in virtual, international, and multicultural teams Agility and teamwork skills, with a proactive and collaborative attitude Будет плюсом: certifications are a plus

Условия

Grow rapidly with a tailored career path and salary evaluation. 70% of our senior leaders started at entry level. Enhance your skills through our Tech Academy catalog, Udemy E-learning Platform, language sessions, webinars, and workshops. Take charge of your training with an annual personal budget and company-paid certifications. Enjoy flexible policies, remote work options, and fantastic social benefits like transit and restaurant tickets, kindergarten support, and private health insurance. Benefit from our WeCare program, supporting employees in critical situations. Unleash your full potential, both professionally and personally.