Cyber Security Engineer (SIEM)

Amaris-Consulting; Madrid; Hybrid; EUR 45,000 - 70,000; Full time

Benefits offered by this job

Flexible policies

Remote work options

Transit tickets

Restaurant tickets

Kindergarten support

Private health insurance

Annual training budget

Certifications paid

WeCare program

Job summary

Amaris Consulting is seeking a Cybersecurity Engineer (SIEM) to join the CISOC team in Madrid. You will focus on security monitoring, develop new SIEM/XDR use cases, and fine-tune detections to reduce false positives while collaborating with international teams.

Responsibilities include scripting, integrations, and contributing to the security roadmap. The role offers hybrid work options and opportunities for growth within a global organization.

Qualifications

• 3-5 years of professional experience in Cybersecurity, ideally in Security Operations / Cyber Intelligence teams.
• Hands-on experience with Microsoft Sentinel SIEM and Azure environments.
• Proven experience designing and developing security use cases for SIEM/XDR technologies.
• Strong scripting skills in Python, PowerShell, and/or Bash, including API integrations.
• Experience with Breach & Attack Simulation (BAS) tools and threat scenario creation.
• Experience with reporting/ticketing platforms, preferably ServiceNow.
• Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage.
• Excellent spoken and written English (fluent).
• Strong analytical thinking, problem-solving mindset, and results orientation.
• Good communication skills and ability to work in virtual, international, multicultural teams.

Responsibilities

• Implement new security use cases on SIEM/XDR platforms to enhance detection coverage.
• Fine-tune existing use cases to reduce false positives and improve alert quality.
• Develop scripts and integrations to leverage SIEM/XDR technologies.
• Maintain and optimize existing scripts, integrations, and automation workflows.
• Support the implementation and maintenance of simulated threats to test and enhance use cases.
• Contribute to the evolution of technologies according to the security roadmap.
• Collaborate with the Security Detection and Incident Response team to improve detection capabilities.
• Act as a point of contact for managing and delivering reports and dashboards.
• Follow the BI framework and ensure compliant documentation and SOP adherence.
• Work with risk and information security teams to present monitoring status to SMEs and management.

Skills

Cybersecurity expertise

Security operations

Scripting languages

API integrations

Security use case design

Threat modeling

English proficiency

Communication

Teamwork

Tools

Microsoft Sentinel

Azure

ServiceNow

BAS tools

Job description

Take your career to the next level with Amaris Consulting as a Cybersecurity Engineer (SIEM). Become part of an international team, thrive in a global group with €800M turnover and 1,000+ clients worldwide, and an agile environment by planning the kickoff and follow up on projects. Join Amaris Consulting, where you can develop your potential and make a difference within the company.

• 3-5 years of professional experience in Cybersecurity, ideally within Security Operations / Cyber Intelligence teams
• Demonstrated hands-on experience working with Microsoft Sentinel SIEM and Azure environments
• Proven experience designing and developing security use cases for SIEM/XDR technologies (e.g. Microsoft Sentinel, Microsoft Defender; certifications are a plus)
• Strong programming skills in scripting languages such as Python, PowerShell, and/or Bash, including API integrations
• Desired experience with Breach & Attack Simulation (BAS) tools and threat scenario creation
• Experience with reporting/ticketing platforms, preferably ServiceNow
• Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage
• Excellent spoken and written English (fluent level)
• Strong analytical thinking, problem-solving mindset, and results orientation
• Good communication skills and the ability to work in virtual, international, and multicultural teams
• Agility and teamwork skills, with a proactive and collaborative attitude

As a member of the Cyber Intelligence & Security Operations Center (CISOC) team, you will focus on security monitoring and continuous improvement of detection capabilities:

• Implement new security use cases on SIEM/XDR platforms to enhance detection coverage
• Fine-tune existing use cases to reduce false positives and improve alert quality
• Develop new scripts and integrations to leverage and enrich SIEM/XDR technologies
• Maintain and optimize existing scripts, integrations, and automation workflows
• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases
• Contribute to the evolution of current technologies according to the defined security roadmap
• Collaborate closely with the Security Detection and Incident Response team to improve detection capabilities
• Act as a point of contact for managing and delivering various reports and dashboards
• Understand and follow the BI framework, ensuring compliant documentation and adherence to SOPs and working instructions
• Work with various risk and information security teams to present security monitoring status and updates to technology SMEs and management

Join our dynamic team of talented individuals and experience a world of growth and opportunities. Here's what we offer:

• Grow rapidly with a tailored career path and salary evaluation.
• 70% of our senior leaders started at entry level.
• Enhance your skills through our Tech Academy catalog, Udemy E-learning Platform, language sessions, webinars, and workshops.
• Take charge of your training with an annual personal budget and company-paid certifications.
• Enjoy flexible policies, remote work options, and fantastic social benefits like transit and restaurant tickets, kindergarten support, and private health insurance.
• Benefit from our WeCare program, supporting employees in critical situations.
• Unleash your full potential, both professionally and personally.

Amaris Consulting is proud to be an equal-opportunity workplace. We are committed to promoting diversity within the workforce and creating an inclusive working environment. For this purpose, we welcome applications from all qualified candidates regardless of gender, sexual orientation, race, ethnicity, beliefs, age, marital status, disability, or other characteristics.

Who are we?

Amaris Consulting is an independent technology consulting firm providing guidance and solutions to businesses. With more than 1000 clients across the globe, we have been rolling out solutions in major projects for over a decade – this is made possible by an international team of7,600 people spread across 5 continents and more than 60countries. Our solutions focus on four different Business Lines: Information System & Digital, Telecom, Life Sciences and Engineering. We’re focused on building and nurturing a top talent community where all our team members can achieve their full potential. Amaris is your steppingstone to cross rivers of change, meet challenges and achieve all your projects with success.