Security Operations Engineering Lead

coches.net; Barcelona; Híbrido; EUR 90.000 - 130.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private health insurance

Wellbeing resources

Hybrid working model

Parental leave and family care support

Salary protection during sick leave

Annual leave and flexible hours

Meals and transport benefits

Employee discounts

Office breakfasts and subsidised cante

Equipment provided (laptop and phone)

On-site presence Tue/Wed at Barcelona

Hybrid collaboration tools

Descripción de la vacante

Adevinta is seeking an experienced Security Operations Engineering Lead to own security operations, detection engineering and incident response while collaborating with our external SOC partner. The role emphasises automation, AI, and continuous improvement across cloud and on-prem environments.

You will lead day-to-day security operations, drive threat detection, and coordinate with the MDR provider to strengthen protections and response capabilities across the organisation.

Formación

• Strong hands-on experience in Security Operations.
• Experience leading Incident Response.
• Experience with Detection Engineering.
• Experience with SIEM, EDR and SOAR technologies.
• Cloud security knowledge across modern enterprise environments.
• Scripting or automation experience (Python, APIs, IaC).
• Excellent stakeholder management skills.

Responsabilidades

• Own day-to-day Security Operations.
• Lead Incident Response activities across the organisation.
• Drive Detection Engineering and improve detection coverage.
• Manage relationship with AI-first MDR / external SOC partner.
• Develop security automations to reduce analyst workload.
• Coordinate threat hunting activities.
• Improve security monitoring across cloud, endpoints and corporate platforms.
• Define and optimise playbooks and response procedures.
• Manage vulnerabilities from an operational perspective and coordinate remediation with engineering teams.
• Produce operational metrics and executive reporting.
• Act as internal technical owner for Security Operations technologies.
• Continuously improve operational maturity through automation and AI.

Conocimientos

Security Operations

Incident Response

Detection Engineering

SIEM

EDR

SOAR

Cloud Security

Automation

Python Scripting

APIs

Infrastructure as Code

Stakeholder Management

Automation & AI

Herramientas

MDR partner management

Descripción del empleo

Job Description

Cybersecurity is becoming a core engineering capability at Adevinta.

We're creating a lean internal security team supported by an AI-first Managed Detection & Response service operating 24x7.

We're looking for an experienced Security Operations Engineering Lead to own our security operations, detection engineering and incident response capabilities while working alongside our external SOC partner.

Job Requirements

• Strong hands-on experience in Security Operations
• Experience leading Incident Response
• Experience with Detection Engineering
• Experience working with SIEM, EDR and SOAR technologies
• Strong understanding of cloud security and modern enterprise environments
• Scripting or automation experience (Python, APIs, Infrastructure as Code is a plus)
• Excellent stakeholder management skills
• Engineering mindset focused on automation and continuous improvement

Nice To Have

• Experience working with MDR providers
• AWS security experience
• MITRE ATT&CK knowledge
• Threat Hunting experience
• Relevant certifications (GCIA, GCIH, GCFA, CISSP...)

Job Responsibilities

You'll be responsible for building and operating Adevinta's modern Security Operations capability.

Responsibilities Include

• Own day-to-day Security Operations
• Lead Incident Response activities across the organisation
• Drive Detection Engineering and continuously improve detection coverage
• Manage the relationship with our AI-first MDR / external SOC partner
• Develop security automations to reduce analyst workload
• Coordinate threat hunting activities
• Improve security monitoring across cloud, endpoints and corporate platforms
• Define and optimise playbooks and response procedures
• Manage vulnerabilities from an operational response perspective and coordinate remediation with engineering teams
• Produce operational metrics and executive reporting
• Act as the internal technical owner for Security Operations technologies
• Continuously improve operational maturity through automation and AI

Job Benefits

What do we offer?

• We take care of you and your family 100% company-funded private health insurance with extensive coverage and reimbursement of medical expenses both in Spain and abroad. You will also have dental and vision coverage.
• Holistic wellbeing Access to psychological support sessions, specialised wellbeing resources and confidential 24/7 professional assistance. You will also have support for sports activities, physiotherapy and programmes designed to promote healthy habits.
• Flexibility and work-life balance. A hybrid working model with flexibility depending on your role and team, including up to 4 weeks per year working from anywhere.
• Family supportEnhanced family-friendly policies, including parental leave, family care leave and additional support during pregnancy, with the possibility of taking time off before the birth while maintaining 100% of your salary.
• Financial protection 100% salary coverage during sick leave, accidents and family-related leave.
• More time for yourself23 days of annual leave, plus reduced working hours during the summer, Easter week and every Friday throughout the year.
• Flexible benefits Options tailored to your needs, including meal vouchers, transport, childcare and other tax-advantaged benefits.
• Exclusive perks and discounts Access to special offers and benefits on travel, shopping, leisure and other services through our corporate partnerships.
• Barcelona offices Free breakfast and a subsidised canteen menu to make your day-to-day experience at the office even better.
• Tools to help you succeedWe will provide you with all the equipment you need to do your job successfully, including a laptop and a company mobile phone.
• Hybrid working model. With on-site attendance at our offices every Tuesday and Wednesday.