Senior SecOps Engineer – AI-Driven Detection

Sozialwerk Pfarrer Sieber; Madrid; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

28 days vacation

Impact Day

Family leave & health support

Team meals & events

Job summary

Personio is seeking an experienced Security Operations Engineer to join our Security organization and help us build scalable detections, SOAR automations, and data pipelines behind them, while safeguarding AI agents and integrations.

You will lead incident responses, hunt for threats, and collaborate with Security, Engineering, IT and Support across our Madrid and other European offices. Excellent written and spoken English are required, with a passion for secure, reliable software.

Qualifications

• 5+ years in cyber security with incident response or threat detection.
• Experience designing enterprise-scale SOAR workflows and AI-driven security ops.
• Experience building and managing security data pipelines and logs.
• Hands-on Git, GitHub/GitLab, and CI/CD for detections and automation.
• Familiarity with cloud-based threats and MITRE ATT&CK.
• Proven incident leadership and executive-style updates.
• Excellent written and spoken English.

Responsibilities

• Design, deploy and maintain detections on our SIEM platform via Git and CI/CD.
• Build SOAR workflows and integrations with AI-assisted triage.
• Tune alerts and validate AI-assisted triage accuracy.
• Secure AI agents and integrations with least-privilege access.
• Serve as on-duty representative for security incidents and inquiries.
• Lead and coordinate security incidents and post-mortems across teams.
• Proactively hunt for threats and update playbooks with new insights.

Skills

Cyber security experience

Security automation

Data pipelines

Detections as code

Threat intel

Incident leadership

Communication

Education

Bachelor's degree in Computer Science or Information Security

Tools

Tines

n8n

Python

Go

Job description

Personio is seeking an experienced Security Operations Engineer to join our Security organization and help us build scalable detections, SOAR automations, and data pipelines behind them, while safeguarding AI agents and integrations.

You will lead incident responses, hunt for threats, and collaborate with Security, Engineering, IT and Support across our Madrid and other European offices. Excellent written and spoken English are required, with a passion for secure, reliable software.