The English-language job board for Spain

Senior Cybersecurity Operations Engineer

Hybrid in Madrid·Full-time·Added 2 months ago

Santander

77 open roles

Overview

Job details

  • Full-time hours

    Per the ad.

  • Hybrid

    Office and home days — the ad has the split.

Requirements

  • Have the right to work in Spain

    No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

  • Work in English

    English is required, per the ad.

  • Be near Madrid for hybrid days

    No relocation package mentioned.

  • Have 6+ years of experience

    Senior-level role.

Pay & benefits

What you'll get

Your contribution matters, and it's recognized. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver. But we know rewards go beyond numbers.

  • We offer more than just a paycheck-our benefits are designed to support your life, your goals and your well-being, now and into the future.
  • Your health is our priority. Through BeHealthy, our global wellness programme, we promote Holistic wellbeing
  • We know family is everything. That's why we offer parental leave, childcare support and family-friendly programmes tailored to each life stage.
  • We're enable our teams to go beyond through global opportunities and broad career paths.
  • We believe in the power of helping. You can dedicate part of your working hours to volunteering

We're here to keep you motivated, help you reach your goals, and celebrate your progress, every step of the way.

Join us to tackle exciting tech challenges in an agile environment, benefiting from learning, growth, and local and international career opportunities in a modern, diverse setting.

Requirements

What we're looking for

  • 6-8 years of experience in cybersecurity, preferably in Security Operations Center (SOC) or Security Operations environments. (Required)
  • Hands-on experience in incident response, alert management, vulnerability management and threat analysis across enterprise environments. (Required)
  • Experience in regulated sectors such as banking, financial services or consulting environments supporting large organizations. (Preferred)
  • Experience in participating in an on-call rotation. (Preferred)
  • Strong knowledge of vulnerability management, incident response, Cyber Threat Intelligence / CTU, SIEM tools and SOAR platforms; understanding of networks, systems and security architecture. (Required)
  • Experience or working knowledge in ethical hacking / pentesting, including tools such as Burp Suite or OWASP ZAP. (Required)

Nice to have

  • Cloud security exposure in AWS, Azure or GCP is a plus. (Preferred)
  • Scripting or programming experience in Python, Bash, PowerShell, JavaScript, TypeScript or similar, with the ability to automate security tasks and workflows. (Preferred)

Languages

  • Spanish (Required)
  • English B2-C1, with the ability to participate in meetings and communicate effectively in international environments. (Required)
  • Strong analytical thinking and sound judgment under pressure, especially during incident response scenarios.
  • Broad technical perspective, curiosity and continuous improvement mindset, with the ability to bring ideas and raise the maturity level of the team.
  • Excellent collaboration and stakeholder management skills, including diplomacy, clear communication and the ability to work with highly specialized and junior profiles alike.
  • This role requires a senior professional who can operate with autonomy across a broad security scope and collaborate effectively with L2/L3 stakeholders.

The role

Senior Cybersecurity Operations Engineer - ODSCountry: Spain

What you'll do

We're shaping the way we work through innovation, cutting-edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:

  • Monitor, investigate and correlate security events and alerts using SIEM platforms such as Splunk, QRadar, Microsoft Sentinel and CrowdStrike/Falcon.
  • Lead and support incident response activities, including triage, containment, coordination, root cause analysis and basic forensic investigation.
  • Own and improve vulnerability management processes, including identification, prioritization, remediation follow-up and reporting, while bringing new ideas to increase team maturity.
  • Manage and operate security tools such as DLP, firewalls or proxys ensuring proper configuration, analyzing alerts and events. Propose and implement adjustments to policies and rules to enhance threat detection and prevention capabilities increasing effectiveness and reducing the exposure surface.
  • Collaborate with Cyber Threat Intelligence / CTU and CERT-related teams to anticipate threats, enrich detections and improve the organization's overall security posture.
  • Design, implement and optimize playbooks in SOAR platforms to accelerate and standardize security operations actions.
  • Contribute to threat analysis, event correlation, security automation, executive and technical reporting, and participation in red team / blue team exercises and penetration testing initiatives.

Hiring process

2 steps2 interviews
  1. Application

  2. CV screening · With recruitment team

  3. Phone call

    With People & Culture team · Phone call · 20 min

    A short call about your motivation and the details of the role.

  4. Interviews

    Virtual or in-person conversations about your experience, expectations and the value you could bring.

  5. Background check

  6. Offer

  • Santander suggests exploring the company on its website and LinkedIn before applying.
  • The Spanish version of the page lists the same eight steps.

About Santander

Banco Santander is a global financial services group headquartered in Boadilla del Monte, Spain, and one of the largest banks in the eurozone by market value. It operates across retail and commercial banking, wealth management, and investment banking (through its CIB division, Santander Corporate & Investment Banking), with a strong focus on digital transformation and fintech innovation. The group serves over 160 million customers worldwide and employs more than 200,000 people, with a significant technology and operations hub in Spain.

In Spain, Santander is a dominant financial institution and a major employer of tech, data, and business talent, with its main technology and operations center in Boadilla del Monte (Madrid area) and additional offices in cities like Barcelona and Santander. The company is actively investing in AI, cybersecurity, and digital product development, making it a relevant destination for international professionals seeking roles in banking, engineering, and data. Its global scale and English-friendly corporate environment, especially in CIB and technology teams, offer strong opportunities for relocators.

Industry
Banking and Fintech
Founded
1857
Employees
100,000–500,000
Headquarters
Boadilla del Monte, Spain
In Spain
Boadilla del Monte, Madrid, Barcelona

Good to know if you are moving

  • Santander is headquartered in Boadilla del Monte, near Madrid, and offers a large, international work environment with English commonly used in tech and CIB roles.
  • The company has a strong commitment to digital transformation, with significant investment in AI, cybersecurity, and data engineering, creating opportunities for tech professionals.
  • Santander provides relocation support and has a diverse workforce, with employees from many nationalities, especially in its technology and operations centers.
  • The bank's global presence means opportunities for international mobility and career growth across its many subsidiaries.
  • Working at Santander in Spain offers a competitive salary and benefits package, including flexible working arrangements and professional development programs.

In their own words

About the company & team

Open Digital Services is the software development company of Santander Group powering the next generation of banks by creating innovative banking products and implementing them in collaboration with Santander Group Affiliates. Santander Group is one of the world's largest financial institutions and the Eurozone's leader, we're committed to being the best Digital Bank with Branches in the industry.

Our mission at ODS is to design and support an advanced digital and omnichannel platform, ensuring the best customer experience using cutting-edge technology. Openbank, our flagship partner, is where we develop our most advanced concepts first. Be part of our Best-in-Class team and help us create unique value for our customers!

Out Cybersecurity team is looking for a Security Operations Senior Engineer based out of Madrid, working in a hybrid model. You will play a key role in strengthening the maturity of our Security Operations function across ODS product environments. You will help protect critical banking platforms and services across geographies, with a strong focus on vulnerability management, threat detection, incident response and proactive security improvement. This is a highly dynamic role for a senior professional who enjoys solving different challenges every day, bringing new ideas and contributing to a continuously evolving cybersecurity capability.

Additional information

Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We're enabling teams to go beyond by valuing who they are and empowering what they bring.

The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

ODS is an equal opportunity employer. All applicants will be considered as equal without paying attention to gender identity, sexual orientation, ethnicity, religion, age, political orientation, union membership nor disability status.

We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify, and build.

The personal data you provide as well as any data generated during the selection process are confidential and will be processed by Open Digital Services, S.L. with registered office at Plaza de Santa Bárbara 2, 28004 (Madrid), Madrid, Spain for the sole purpose of managing your participation in the selection processes and, where appropriate, to formalise your recruitment.

For further information about your rights and data protection, please read the Open Digital Services Privacy Policy applicable to this type of data processing here

All open roles at Santander
WhatsApp
MadridNo Spanish needed
MadridNo Spanish needed

Frontend Engineer

Santander1w ago
Remote, Boadilla del MonteNo Spanish needed
Hybrid in Boadilla del MonteFluent Spanish
MadridNo Spanish needed

IT Risk Audit Analyst II

Santander1w ago
Hybrid in Boadilla del MonteNo Spanish needed
Hybrid in Boadilla del MonteNo Spanish needed

Equity Analyst

Santander1w ago
Hybrid in MadridNo Spanish needed
Hybrid in SpainFluent Spanish
Hybrid in Boadilla del MonteNo Spanish needed

Front Office XVA Quant

Santander2w ago
Boadilla del MonteNo Spanish needed
Hybrid in MadridFluent Spanish
See all 77 jobs