Cybersecurity Engineer (SIEM) – Remote & Growth Path

Amaris Consulting; Madrid; Hybrid; EUR 42,000 - 64,000; Full time

Benefits offered by this job

Remote work options

Certifications budget

Health insurance

Transit tickets

Restaurant tickets

Kindergarten support

Job summary

Amaris Consulting is seeking a Cybersecurity Engineer (SIEM) to join an international team in Madrid. You will implement, fine‑tune, and automate SIEM/XDR use cases, scripts, and integrations while staying aligned with the security roadmap and reporting requirements.

You will collaborate with the Security Detection and Incident Response teams and contribute to threat testing and dashboard delivery in a fast‑paced, multilingual environment.

Qualifications

• 3–5 years of professional experience in Cybersecurity.
• Hands‑on experience with Microsoft Sentinel SIEM and Azure environments.
• Experience designing security use cases for SIEM/XDR technologies (Microsoft Sentinel/ Defender).
• Strong scripting skills in Python, PowerShell and/or Bash, including API integrations.
• Desired BAS tools experience and threat scenario creation.
• Experience with reporting/ticketing platforms, preferably ServiceNow.
• Solid understanding of common security weaknesses, remediation, prioritization, change management, analysis and triage.
• Excellent spoken and written English (fluent).
• Strong analytical thinking, problem‑solving mindset, and results orientation.

Responsibilities

• Implement new security use cases on SIEM/XDR platforms to enhance detection coverage.
• Fine‑tune existing use cases to reduce false positives and improve alert quality.
• Develop new scripts and integrations to leverage SIEM/XDR technologies.
• Maintain and optimize existing scripts, integrations, and automation workflows.
• Support the implementation and maintenance of simulated threats to automatically test and enhance use cases.
• Contribute to the evolution of current technologies according to the security roadmap.
• Collaborate with the Security Detection and Incident Response team to improve detection capabilities.
• Deliver various reports and dashboards as required.
• Follow the BI framework, ensuring compliant documentation and SOP adherence.
• Coordinate with risk and information security teams to present monitoring status to SMEs and management.

Skills

Microsoft Sentinel

Azure

Security use cases design

Python

PowerShell

Bash

English communication

Analytical thinking

Team collaboration

Threat detection

Tools

ServiceNow

Threat simulation tools

BAS tools

Job description

Amaris Consulting is seeking a Cybersecurity Engineer (SIEM) to join an international team in Madrid. You will implement, fine‑tune, and automate SIEM/XDR use cases, scripts, and integrations while staying aligned with the security roadmap and reporting requirements.

You will collaborate with the Security Detection and Incident Response teams and contribute to threat testing and dashboard delivery in a fast‑paced, multilingual environment.