Madrid-Based Senior SOC Engineer – Hybrid

Banco Santander SA; Madrid; Hybrid; EUR 70,000 - 100,000; Full time

Benefits offered by this job

BeHealthy wellness program

Parental leave

Childcare support

Global career opportunities

Volunteering time

Job summary

Open Digital Services in Madrid is seeking a Senior Cybersecurity Operations Engineer to reinforce our Security Operations Center. You will monitor events, drive incident response, and own vulnerability management across banking environments, collaborating with CTI and CERT teams.

You should bring 6–8 years in cybersecurity, hands-on IR and threat analysis, plus proficiency with SIEM/SOAR tools. Hybrid Madrid-based role with competitive benefits and career growth.

Qualifications

• 6-8 years of experience in cybersecurity, preferably in SOC or Security Operations.
• Hands-on incident response, alert management, vulnerability management and threat analysis.
• Experience in regulated sectors such as banking, financial services or consulting.
• Experience in participating in an on-call rotation.

Responsibilities

• Monitor, investigate and correlate security events and alerts using SIEM platforms (Splunk, QRadar, Microsoft Sentinel).
• Lead and support incident response activities, including triage, containment, coordination and basic forensics.
• Own and improve vulnerability management processes with remediation tracking and reporting.
• Manage and operate security tools (DLP, firewalls, proxies), optimizing configurations and rules.
• Collaborate with Cyber Threat Intelligence / CERT teams to anticipate threats and enrich detections.
• Design, implement and optimize playbooks in SOAR platforms to accelerate response.
• Contribute to threat analysis, event correlation, security automation and testing exercises.

Skills

Vulnerability management

Incident response

Cyber Threat Intelligence

SIEM & SOAR platforms

Threat detection & analytics

SOC experience

Scripting (Python / Bash / PowerShell)

Cloud security (AWS/Azure/GCP)

English communication in teams

Tools

Burp Suite

OWASP ZAP

Splunk

QRadar

Microsoft Sentinel

CrowdStrike Falcon

Job description

Open Digital Services in Madrid is seeking a Senior Cybersecurity Operations Engineer to reinforce our Security Operations Center. You will monitor events, drive incident response, and own vulnerability management across banking environments, collaborating with CTI and CERT teams.

You should bring 6–8 years in cybersecurity, hands-on IR and threat analysis, plus proficiency with SIEM/SOAR tools. Hybrid Madrid-based role with competitive benefits and career growth.