Security Services Operations Expert

Vodafone Group; Málaga; Presencial; EUR 40.000 - 70.000; Jornada completa

Descripción de la vacante

Vodafone Group is seeking a Security Services Operations Expert to elevate its managed security services on a global scale. This strategic role involves leading cybersecurity initiatives, overseeing service enhancements, and fostering collaboration across international teams to ensure robust security against evolving threats.

Formación

• 3+ years of experience in cybersecurity operations.
• Hands-on work in security engineering and incident response.
• Experience in international SOC environments.

Responsabilidades

• Lead managed security services and ensure quality delivery.
• Deploy and manage security platforms (SIEM, SOAR).
• Define and improve cybersecurity processes effectively.

Conocimientos

Cybersecurity operations

Security engineering

Threat detection

Incident response

Communication skills

Process optimization

Cloud environments

Scripting and automation

Educación

Cybersecurity certifications (CISSP, CCSP, CISM)

Herramientas

SIEM

SOAR

Descripción del empleo

Would you like to be part of our new adventure? Vodafone Group is launching its new technological HUB (MSH), an international center of excellence dedicated to research and development of technical solutions, such as Secure Networks, 5G and 6G development, Open RAN, IoT, MPN & MEC, and UCC for Vodafone Business, platforms, and enterprise solutions.

Come and join us to create the future together!

The Security Services Operations Expert plays a strategic role in the evolution and continuous improvement of Vodafone’s managed security services, ensuring they remain resilient, scalable, and aligned with emerging threats and operational demands.

This role leads the operational excellence of a broad portfolio of cybersecurity services, focusing on service reliability, process optimization, and measurable outcomes. Acting as a key link between technical functions—such as engineering, security operations, and platform teams—the expert ensures that detection, response, and protection capabilities are consistently enhanced and future-ready.

Operating in a modern, cloud-native environment with an advanced security technology stack, the expert will help shape processes, drive service innovation, and foster a culture of accountability and technical excellence across global security operations.

Responsibilities:

1. Lead and evolve managed security services (EDR/XDR, MDM, MDR, SSE, Incident Response) across multiple countries, ensuring quality delivery, continuous improvement, and alignment with threat and business needs.
2. Deploy and manage security platforms (SIEM, SOAR, DLP, NGFW, IPS, WAF), adapting them to operational requirements and evolving threat landscapes.
3. Define and evolve cybersecurity processes, ensuring their effectiveness and implementing improvements in a timely and measurable manner.
4. Provide technical enablement to L1/L2 SOC teams, sharing methodologies, tools, and best practices for threat hunting, detection, and incident response.
5. Monitor and report on SOC performance, using KPIs and dashboards to drive data-informed decisions and service evolution.
6. Ensure operational excellence and compliance, maintaining ISO 27001-aligned documentation that supports automation, onboarding, and knowledge sharing.
7. Operate confidently in cloud-native environments.
8. Collaborate across international teams, acting as the operational link between Product, Engineering, and SOC functions to ensure alignment and service excellence.

What you bring

1. 3+ years of experience in cybersecurity operations, including hands-on work in security engineering, red teaming, penetration testing, threat detection, and incident response in complex ICT environments.
2. Experience working in international SOC environments, coordinating with cross-functional teams (Product, Engineering, Operations) and managing performance metrics (SLA, MTTR, FRT).
3. Strong communication skills and ability to document, report, and optimize SOC processes.
4. Proven experience with SIEM and SOAR platforms.
5. Solid knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, FAIR) and operational threat intelligence practices.
6. Proficiency in scripting and automation.
7. Strong familiarity with cloud environments (Azure, GCP).
8. Understanding of industry standards and frameworks: ISO 27001/27002, NIST, CIS, OWASP TOP 10, CVSS, and GDPR.
9. Cybersecurity certifications such as CISSP, CCSP, CISM (or equivalent) and cloud certifications at architecture or engineering are highly valued.

Together we can

At Vodafone, we are dedicated to fostering a diverse and inclusive work environment. We take pride in our commitment to providing equal opportunities to individuals of all backgrounds and abilities. We believe that diversity includes a spectrum of experiences, and we welcome and support individuals with functional diversity.

Our mission is to create an accessible workplace where all team members can thrive, regardless of their unique abilities or challenges. We are committed to making reasonable accommodations to ensure everyone can fully participate and excel in our organization. We value the unique perspectives and talents that individuals with functional diversity bring to our team and consider them an integral part of our success and innovation.

We recognize and celebrate the importance of diversity and inclusivity in our workplace so that we are as diverse as the customers and communities we serve. We do not tolerate any form of discrimination especially related to but not limited to race, colour, age, veteran status, gender identification, sexual orientation, pregnancy, ethnicity, disability, religion, political affiliation, trade union membership, nationality, indigenous status, medical condition, HIV status, social origin, cultural background, social or marital status.