Senior SIEM Engineer - Hybrid (Azure Sentinel)

EY; Málaga; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Well-being programs

Volunteer opportunities

Career development

Job summary

EY GDS Spain in Malaga is seeking a Senior SIEM Engineer to design, integrate, and operate SIEM use cases and automations within a Threat Detection & Response environment focused on Microsoft Sentinel and XDR.

You will contribute to cloud-native security solutions, support clients in selecting the right platform, and participate in digital transformation across on-prem and cloud data sources, with hands-on engineering and strong collaboration.

Qualifications

• 2 - 4 years of experience in SIEM engineering (design, onboarding, use case development, tuning, and operations), ideally with Microsoft Sentinel.
• Hands-on experience with Azure , Windows/Linux, and scripting (e.g., Python, PowerShell, Bash) as well as automation concepts.
• Experience building or operating SOAR-style automations (e.g., Logic Apps / playbooks) in a security operations context.
• English at least B2 (written and spoken) is required.

Responsibilities

• Integrate data sources into Microsoft Sentinel (cloud, identity, endpoint, network, and on-prem) and ensure data quality and normalization.
• Design, implement, and operate analytics rules, SIEM use cases, and hunting queries (KQL; SPL experience is a plus).
• Develop and maintain playbooks and automations using Azure Logic Apps to enrich, orchestrate, and standardize response workflows.
• Act as a technical subject matter expert for SIEM and Microsoft Sentinel/XDR solutions and provide hands-on guidance to stakeholders.
• Optimize SOC Operations leveraging the latest AI capabilities
• Continuously optimize detection, response, and automation capabilities (tuning, false-positive reduction, performance, and maintainability).
• Contribute to engineering best practices such as documentation, repeatable deployments, and (where applicable) detection/content as code.

Skills

Microsoft Sentinel

XDR

Splunk

Open-source SIEM

Azure

Python

PowerShell

SPL

Tools

Azure Logic Apps

KQL

Playbooks

SOAR

Job description

EY GDS Spain in Malaga is seeking a Senior SIEM Engineer to design, integrate, and operate SIEM use cases and automations within a Threat Detection & Response environment focused on Microsoft Sentinel and XDR.

You will contribute to cloud-native security solutions, support clients in selecting the right platform, and participate in digital transformation across on-prem and cloud data sources, with hands-on engineering and strong collaboration.