Remote Microsoft Sentinel Security Engineer (Spain)

wBrain; España; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

wBrain is seeking an experienced Microsoft Sentinel Security Engineer for an international cybersecurity project. You will design, implement, and maintain Sentinel solutions, build analytics rules, workbooks, and playbooks, and integrate logs from cloud and on-premise sources.

Collaborate with cross‑functional teams to strengthen security posture and document procedures. Ideal candidates have hands-on KQL, SIEM/SOAR expertise, and familiarity with Defender XDR and Azure security services.

Formación

• Proven experience with Microsoft Sentinel and related SIEM/SOAR technologies.
• Hands-on with KQL and analytics rules, workbooks, and automation playbooks.
• Experience integrating multiple log sources into Sentinel.
• Spanish language mandatory; English professional working proficiency.
• Ability to work remotely from Spain in an international project.

Responsabilidades

• Design, implement, and maintain Microsoft Sentinel solutions.
• Develop and optimize analytics rules, workbooks, watchlists, and automation playbooks.
• Integrate security logs from cloud, on-premises, and third-party environments.
• Investigate security incidents and support threat detection and response.
• Fine-tune detection rules to reduce false positives and improve SOC efficiency.
• Collaborate with cybersecurity, infrastructure, and cloud teams.
• Produce technical documentation and operational procedures.
• Support continuous improvement of security monitoring and incident response.

Conocimientos

Microsoft Sentinel

SIEM

SOAR

KQL

Azure security

Threat detection

PowerShell

Python

Automation

Herramientas

Logic Apps

Microsoft Defender XDR

Descripción del empleo

wBrain is seeking an experienced Microsoft Sentinel Security Engineer for an international cybersecurity project. You will design, implement, and maintain Sentinel solutions, build analytics rules, workbooks, and playbooks, and integrate logs from cloud and on-premise sources.

Collaborate with cross‑functional teams to strengthen security posture and document procedures. Ideal candidates have hands-on KQL, SIEM/SOAR expertise, and familiarity with Defender XDR and Azure security services.