SIEM Security Engineer — Remote & Growth Path

Amaris Consulting; Madrid; Hybrid; EUR 45,000 - 70,000; Full time

Benefits offered by this job

Flexible policies

Remote work options

Transit tickets

Restaurant tickets

Kindergarten support

Private health insurance

Annual training budget

Certifications paid

WeCare program

Job summary

Amaris Consulting is seeking a Cybersecurity Engineer (SIEM) to join the CISOC team in Madrid. You will focus on security monitoring, develop new SIEM/XDR use cases, and fine-tune detections to reduce false positives while collaborating with international teams.

Responsibilities include scripting, integrations, and contributing to the security roadmap. The role offers hybrid work options and opportunities for growth within a global organization.

Qualifications

• 3-5 years of professional experience in Cybersecurity, ideally in Security Operations / Cyber Intelligence teams.
• Hands-on experience with Microsoft Sentinel SIEM and Azure environments.
• Proven experience designing and developing security use cases for SIEM/XDR technologies.
• Strong scripting skills in Python, PowerShell, and/or Bash, including API integrations.
• Experience with Breach & Attack Simulation (BAS) tools and threat scenario creation.
• Experience with reporting/ticketing platforms, preferably ServiceNow.
• Solid understanding of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage.
• Excellent spoken and written English (fluent).
• Strong analytical thinking, problem-solving mindset, and results orientation.
• Good communication skills and ability to work in virtual, international, multicultural teams.

Responsibilities

• Implement new security use cases on SIEM/XDR platforms to enhance detection coverage.
• Fine-tune existing use cases to reduce false positives and improve alert quality.
• Develop scripts and integrations to leverage SIEM/XDR technologies.
• Maintain and optimize existing scripts, integrations, and automation workflows.
• Support the implementation and maintenance of simulated threats to test and enhance use cases.
• Contribute to the evolution of technologies according to the security roadmap.
• Collaborate with the Security Detection and Incident Response team to improve detection capabilities.
• Act as a point of contact for managing and delivering reports and dashboards.
• Follow the BI framework and ensure compliant documentation and SOP adherence.
• Work with risk and information security teams to present monitoring status to SMEs and management.

Skills

Cybersecurity expertise

Security operations

Scripting languages

API integrations

Security use case design

Threat modeling

English proficiency

Communication

Teamwork

Tools

Microsoft Sentinel

Azure

ServiceNow

BAS tools

Job description

Amaris Consulting is seeking a Cybersecurity Engineer (SIEM) to join the CISOC team in Madrid. You will focus on security monitoring, develop new SIEM/XDR use cases, and fine-tune detections to reduce false positives while collaborating with international teams.

Responsibilities include scripting, integrations, and contributing to the security roadmap. The role offers hybrid work options and opportunities for growth within a global organization.