Senior SIEM/XDR Security Engineer – Detection & Automation

NextLink Group; Sant Cugat del Vallès; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

NextLink Group is seeking a Senior Security Engineer (SIEM) to join our CISOC team and work with a leading pharmaceutical client. You will focus on security monitoring, detection development, automation, and reporting using SIEM/XDR technologies.

You will design and tune use cases, develop scripts and integrations, and contribute to threat simulations to improve detection. Collaboration with Security Detection, Incident Response, Risk, and Information Security teams is essential.

Formación

• Hands-on experience with SIEM/XDR and security monitoring/detection.
• Experience developing and tuning detection use cases (e.g., MS Sentinel/Defender).
• Programming/scripting: Python, PowerShell, Bash and API integrations.
• Good understanding of risk, triage, change management, and remediation.

Responsabilidades

• Design, implement, and improve SIEM/XDR security use cases with reduced false positives.
• Develop scripts, integrations, and APIs to enrich SIEM/XDR capabilities.
• Support simulated threats to test and improve detection use cases.
• Evolve security technologies per roadmap and work with teams on detection enhancements.
• Present monitoring status and updates to technical experts and management.
• Follow SOPs and document security monitoring processes and findings.

Conocimientos

SIEM/XDR

Threat detection

Python

PowerShell

APIs

Bash

English communication

Herramientas

Microsoft Sentinel

Microsoft Defender

ServiceNow

Descripción del empleo

NextLink Group is seeking a Senior Security Engineer (SIEM) to join our CISOC team and work with a leading pharmaceutical client. You will focus on security monitoring, detection development, automation, and reporting using SIEM/XDR technologies.

You will design and tune use cases, develop scripts and integrations, and contribute to threat simulations to improve detection. Collaboration with Security Detection, Incident Response, Risk, and Information Security teams is essential.