Security Engineer

NextLink Group; Barcelona; On-site; EUR 45,000 - 75,000; Full time

Job summary

NextLink Group is seeking a SIEM Engineer to join our cyber intelligence and security operations team in Barcelona, focusing on security monitoring and detection using SIEM and XDR technologies.

You will develop use cases, automate monitoring, and collaborate with Risk and Information Security teams to improve detection and reporting. The role includes presenting findings to technical and management audiences and maintaining up-to-date documentation.

Qualifications

• Design and implement SIEM/XDR use cases.
• Develop scripts and integrations to enrich SIEM/XDR capabilities.
• Support simulated threats / BAS scenarios to test detections.

Responsibilities

• Design, implement, and continuously improve SIEM/XDR use cases.
• Develop scripts, integrations, and APIs to automate monitoring.
• Collaborate with Security Detection, Incident Response and Risk teams.

Skills

SIEM

XDR

Scripting

Automation

Threat detection

Job description

Nextlink is looking for a SIEM Engineer to join our team and collaborate closely with one of our most recognised clients in the pharmaceutical sector.

You will join the Cyber Intelligence & Security Operations Center, focusing on security monitoring and detection capabilities through SIEM and XDR technologies.

The role combines hands-on security engineering, use case development, automation, detection improvement, reporting, and collaboration with Security Detection, Incident Response, Risk, and Information Security teams.

Main Responsibilities:

• Design, implement, and continuously improve SIEM/XDR security use cases, including fine-tuning to reduce false positives.
• Develop and maintain scripts, integrations, and APIs to enrich SIEM/XDR capabilities and automate security monitoring activities.
• Support the implementation and maintenance of simulated threats / BAS scenarios to test and improve detection use cases.
• Contribute to the evolution of security technologies in line with the defined roadmap and improve detection capabilities together with Security Detection and Incident Response teams.
• Act as a point of contact for security monitoring reports and dashboards, presenting status and updates to technical experts and management.
• Follow defined frameworks, processes, SOPs, and working instructions, ensuring compliant and up-to-date documentation.
• Collaborate with Risk and Information Security teams on identified risks, remediation, prioritisation, analysis, triage, and security monitoring improvements.