Senior Security Operations Engineer | SIEM, IR & Threat Intel

Santander; Huércal-Overa; Híbrido; EUR 70.000 - 100.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

BeHealthy wellness programme

Parental leave

Childcare support

Global career opportunities

Volunteering time

Descripción de la vacante

Santander is seeking a Senior Cybersecurity Operations Engineer for Open Digital Services, based in Spain, with a hybrid work model. You will strengthen Security Operations across product environments, focusing on threat detection, incident response, vulnerability management and automation.

The role requires senior-level expertise in SOC, strong technical skills in SIEM, CTI and SOAR, and experience with security tooling in regulated financial settings.

Formación

• 6–8 years of experience in cybersecurity, preferably in SOC or Security Operations.
• Hands-on incident response, alert management, vulnerability management and threat analysis.
• Experience in regulated sectors such as banking or financial services.
• Experience in participating in an on-call rotation.
• Strong knowledge of vulnerability management, incident response, CTI, SIEM and SOAR.

Responsabilidades

• Monitor, investigate and correlate security events using SIEM platforms.
• Lead and support incident response activities including containment and root-cause analysis.
• Own and improve vulnerability management processes and reporting.
• Manage security tools like DLP, firewalls and proxies and tune rules.
• Collaborate with CTI and CERT teams to anticipate threats and enrich detections.
• Design and optimize playbooks in SOAR to speed security operations.
• Contribute to threat analysis, automation and security reporting.

Conocimientos

vulnerability management

incident response

Cyber Threat Intelligence / CTU

SIEM tools

SOAR platforms

networks & security architecture

ethical hacking / pentesting

Python / Bash / PowerShell / JS

Herramientas

Burp Suite

OWASP ZAP

Descripción del empleo

Santander is seeking a Senior Cybersecurity Operations Engineer for Open Digital Services, based in Spain, with a hybrid work model. You will strengthen Security Operations across product environments, focusing on threat detection, incident response, vulnerability management and automation.

The role requires senior-level expertise in SOC, strong technical skills in SIEM, CTI and SOAR, and experience with security tooling in regulated financial settings.