SIEM & SOAR Specialist Engineer

• Basic knowledge in administration, deployment, and creation of use cases in SIEM platforms. Experience is valued in the following order: Microsoft Sentinel, Crowdstrike, XSIAM, and Splunk
• Basic knowledge in cybersecurity
• Experience or familiarity with security incident investigations
• Technical analytical skills
• Good communication and teamwork skills

• Security certifications
• Experience with EDR tools, automation (SOAR) or incident response
• Knowledge of basic scripting (Python, PowerShell, etc.).
• Intermediate level of technical English
• Advanced scripting skills (Python, PowerShell) for automation and log management.
• Knowledge in incident management and digital forensics.
• Previous experience in leading technical teams and in mentoring or training roles.

We offer the opportunity to attend, alongside the cybersecurity team, conferences, presentations, and talks at Information Security Congresses, such as Navaja Negra, RootedCON, Hack-én, CCN STIC workshops, etc., as we are sponsors of many of these events. 

We offer growth opportunities in a dynamic work environment focused on cybersecurity innovation. As well as participating in strategic projects with a direct impact on corporate security.

We provide you with access to a wide training catalog in technological skills and certifications tailored to the demands of projects and clients. Language training, where you can choose from 12 options. Training in personal skills within the professional sphere. Access to other additional platforms such as Udemy and OpenWebinars.

We offer a flexible compensation package, allowing you to choose different products and model how to distribute them yourself: health insurance, meal vouchers, childcare, transportation card, and training. Additionally, we provide access to corporate group benefits: discounts on various products and services.

You will have a permanent contract with flexible office hours and the possibility of remote work to achieve the best work-life balance. We provide stability and an excellent working environment, made up of the best professionals in the field of Cybersecurity.

We offer an attractive career path based on experience and personal potential, within a continuously evolving company with solid growth.

Join Inetum to participate in the technological and digital transformation of leading national and international organizations. We are committed to generating a positive impact on our clients, their processes and technology, but also on you.

We are looking for a Senior Cybersecurity professional with extensive experience in automation (SOAR), Log Management, and the development of advanced use cases, to join our Security Operations Center (SOC) team.

This professional will play a strategic role in the definition and optimization of security processes, the implementation of SIEM and SOAR technologies, and the development of threat engineering.

• Develop, maintain and optimize automation playbooks on SIEM and SOAR platforms to improve efficiency and security incident response.
• Design, implement and maintain use cases: queries and dashboards in SIEM solutions for the generation of effective alerts and customized dashboards.
• Identify and collect requirements for the development of complex use cases in SIEM and SOAR.
• Create and update documentation for architecture, operating processes and use cases in SIEM and SOAR environments.
• Advise and train the technical team in threat engineering practices, automated response and log administration.
• Collaborate with application, infrastructure and other stakeholder teams to ensure compliance with best practices in data usage and visualizations.
• Lead Threat Engineering initiatives, managing threat intelligence and its application in the continuous improvement of alerts and incident detection.
• Administer and maintain SIEM platforms 
• Participate in the deployment of SIEM solutions and in the creation of use cases
• Collaborate in investigations of security events and incidents
• Document findings and contribute to the continuous improvement of the managed platform, rules and alerts
• Collaborate with other SOC teams in the analysis and fine-tuning of use cases