Cyber SOC Manager (German) – XDR & Cloud Security Lead

Tamarind Intelligence; Málaga; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work model

Career development

Well-being program

Volunteering opportunities

Rewards program

Descripción de la vacante

EY GDS Spain is seeking a Cyber Security SOC Manager (German Speaker) to drive cloud security monitoring using MS Sentinel/Defender XDR within a hybrid setup in Málaga. You will architect security monitoring, create runbooks, and guide customers through testing, pilot to production stages, ensuring successful deployments.

You will serve as the cloud security SME, shaping best practices across Azure, Sentinel, and Defender offerings, while coordinating data connectors and incident response

Formación

• Bachelor-level engineering or tech degree.
• Fluent German (C1) or higher.
• Strong English communication skills.
• Experience in cloud security monitoring and incident response.
• Azure certifications are a plus.

Responsabilidades

• Architect and implement cloud security monitoring with MS Sentinel/Defender XDR.
• Develop, test and deploy Sentinel use cases and playbooks.
• Advise customers during testing, pilot, production and training phases.
• Act as SME for cloud security capabilities and Azure platform design.
• Configure incidents, dashboards and data connectors in Sentinel.

Conocimientos

MS Sentinel/Defender

Threat modelling

Mitre ATT&CK

Cloud security

Python scripting

Educación

B.Tech./B.E.

Herramientas

MS Sentinel

Defender for Cloud

Azure

Splunk

QRadar/LogRhythm

Descripción del empleo

EY GDS Spain is seeking a Cyber Security SOC Manager (German Speaker) to drive cloud security monitoring using MS Sentinel/Defender XDR within a hybrid setup in Málaga. You will architect security monitoring, create runbooks, and guide customers through testing, pilot to production stages, ensuring successful deployments.

You will serve as the cloud security SME, shaping best practices across Azure, Sentinel, and Defender offerings, while coordinating data connectors and incident response