Remote Security Ops Engineer III: SIEM & Cloud

Jobgether; España; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Remote work

Equity

25 days annual leave

Coworking access

Team events

Equipment

Home office support

Learning budget

Private medical insurance

Other location perks

Onboarding & collaboration

Job summary

JOBGETHER is seeking a Security Engineer III - Security Operations to join a globally distributed team focused on protecting cloud infrastructure within a payments environment. You will own detection and response capabilities, build and optimize SIEM detections, and automate responses using Python and no-code tools while collaborating across cloud, compliance, and incident response domains.

The role emphasizes technical ownership, threat detection across Elastic SIEM and AWS, and improving

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections.
• Experience with Elastic SIEM preferred; Splunk, Microsoft Sentinel also relevant.
• Practical experience securing AWS environments and implementing cloud-native detection.
• Proficiency in Python for scripting, automation, and tooling.
• Experience with Terraform or other infrastructure-as-code technologies.
• Working knowledge of the MITRE ATT&CK framework and its application.
• Demonstrated experience triaging, investigating, and resolving security incidents.
• Strong written communication for documenting investigations and risk decisions.
• Ability to work independently and own security outcomes.

Responsibilities

• Own end-to-end detection and response initiatives, from rules to automated responses.
• Build, tune, and maintain detections across Elastic SIEM and AWS environments.
• Manage the security investigation queue and escalate incidents as needed.
• Document investigations and share learnings to support consistency.
• Develop runbooks and automation using Python and no-code tools like Zapier or Tines.
• Make risk decisions and escalate when extra expertise is required.
• Support SOC2 and PCI DSS compliance with audit-ready security controls.
• Use Terraform and Python to improve security tooling and infrastructure.
• Participate in on-call rotation for monitoring and response.
• Continuously improve detection coverage and response efficiency.

Skills

SIEM detections

Elastic SIEM

Python scripting

Terraform

AWS security

Incident response

MITRE ATT&CK

Threat detection

On-call readiness

Tools

Elastic

Terraform

Zapier

Tines

Job description

JOBGETHER is seeking a Security Engineer III - Security Operations to join a globally distributed team focused on protecting cloud infrastructure within a payments environment. You will own detection and response capabilities, build and optimize SIEM detections, and automate responses using Python and no-code tools while collaborating across cloud, compliance, and incident response domains.

The role emphasizes technical ownership, threat detection across Elastic SIEM and AWS, and improving