Senior Security Engineer — SIEM, IAM & AI Security

Vivid Money; Barcelona; Hybrid; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Learning & development budget

Fully paid vacation

Sports compensation

Career growth opportunities

Job summary

Vivid is seeking a Security Engineer to own and scale security across identities, SaaS, endpoints, and networks in a cloud-native AWS setup. You will design controls, automate security workflows, and lead security initiatives with minimal oversight.

You will manage SIEM detection engineering, IdP administration, ongoing access recertification, and implement robust AI security measures while collaborating with engineers and leadership.

Qualifications

• 5+ years in security operations, corporate/IT security, or endpoint engineering.
• Strong with a SIEM (Splunk, Elastic, Panther, Sumo Logic) - detection engineering and incident response - plus an identity provider (Okta, Entra ID, Google Workspace), access recertification, and least-privilege / PAM.
• Working knowledge of endpoint security (MDM, XDR/EDR/AV) and email / phishing defense.
• Practical experience securing AI usage within a company: shadow AI discovery, DLP for AI tools, controls for AI agents, and a risk framework.

Responsibilities

• Own SIEM alerting end-to-end: ship logs from endpoints, IdP, VPN, SaaS, and cloud; write and tune detection rules; cut false positives.
• Act as first responder for security incidents - investigate, contain, drive to closure with runbooks, and feed recurring issues into preventive controls.
• Administer the IdP (SSO via SAML/OIDC, MFA, conditional access) and run access recertification end-to-end across IdP, SaaS, AWS, and internal tools.
• Hunt down over-permissive and stale access, enforce least privilege and PAM, catch SoD gaps, and ensure JML and third-party access work in practice.
• Improve SaaS security posture (Google/Microsoft, Slack, GitHub, others) and apply DLP controls to limit data leakage.
• Keep the endpoint stack healthy and well-tuned - MDM, XDR/AV, device-compliance checks for VPN/ZTNA - with automated remediation.
• Defend against phishing and spoofing - secure email gateway rules, DMARC/SPF/DKIM - and run phishing simulations and security awareness.

Skills

SIEM & IR

IdP & SSO

Endpoint security

Automation & scripting

AI security governance

Tools

Splunk

Elastic

Panther

Sumo Logic

Okta

Job description

Vivid is seeking a Security Engineer to own and scale security across identities, SaaS, endpoints, and networks in a cloud-native AWS setup. You will design controls, automate security workflows, and lead security initiatives with minimal oversight.

You will manage SIEM detection engineering, IdP administration, ongoing access recertification, and implement robust AI security measures while collaborating with engineers and leadership.