The English-language job board for Spain

Cybersecurity Automation Engineer SOC SIEM/SOAR

Hybrid in Madrid·Full-time·Added over 2 years ago (last checked 12 Oct)

T-Systems Iberia

81 open roles

Apply

Our summary

Work mode: Hybrid, Madrid
Contract: Full-time
English: Required
Experience: 3+ years
Education: University degree
Benefits: Life insurance, flexible pay plan

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

Languages: Spanish, intermediate English; advanced English is valued.

University degree in Technical or Higher Engineering in Computer Science or Telecommunications, or another similar technical degree. A master's degree or specialization in cybersecurity or similar is highly valued.
Demonstrable experience of at least 3 years in the cybersecurity field, with at least 2 of those years in a SOC or similar role performing functions similar to those described for this position.
Technical Knowledge
1. Cybersecurity Fundamentals and basic knowledge:
  - Security Principles: Confidentiality, integrity, and availability (CIA).
  - Types of Threats: Knowledge of malware, phishing, denial-of-service (DoS) attacks, APTs (Advanced Persistent Threats), TTPs (tactics, techniques, and procedures), etc.
  - Incident Analysis:
    - Understanding of the complete incident management lifecycle, from detection to remediation and post-incident reporting.
    - Identification and Containment: Ability to quickly identify the nature of a security incident and take initial containment measures.
    - Investigation: Ability to delve into the technical details of an incident, using logs, network traffic analysis, and forensic analysis tools.
  - Cloud Security: Familiarity with cloud computing environments (AWS, Azure, GCP) and experience in protecting cloud-based infrastructures and services.
  - Networking and Systems Knowledge: Understanding of network architecture and topologies. Knowledge of common protocols such as TCP/IP, HTTP, HTTPS, DNS, etc.
  - Operating Systems: Familiarity with Windows, Linux, and Unix operating systems.
  - Event Logging: Knowledge of event logging systems in different operating systems (for example, Event Viewer in Windows, syslog in Linux).
2. Knowledge and experience in SIEM (Security Information and Event Management)
  - SIEM Tools: Familiarity with SIEM tools. Knowledge and experience in SPLUNK SIEM and/or Azure Sentinel is highly valued.
  - Data Ingestion and Normalization: Understanding of how log data is collected, normalized, and stored.
  - Rules and Event Correlation: Ability to create and adjust correlation rules to detect attack patterns and suspicious activities.
  - Alert Analysis: Ability to analyze alerts and events generated by SIEM, identify false positives, and prioritize incidents.
3. Knowledge and experience in SOAR (Security Orchestration, Automation, and Response)
  - SOAR Platforms: Experience with SOAR tools such as SPLUNK SOAR; Palo Alto Cortex XSOAR and/or XSIAM, automation in Azure Sentinel, etc.
  - Workflow Automation: Knowledge in the creation and management of playbooks and automatic workflows to respond to security incidents.
  - Orchestration: Ability to integrate multiple security tools and systems through SOAR to improve incident response.
Automation and Scripting Knowledge
1. Scripting Languages
  - Python: Ability to write Python scripts to automate security tasks.
  - Bash/PowerShell: Experience with scripting in Bash (for Linux systems) and PowerShell (for Windows systems).
  - Security APIs: Ability to interact with APIs of security tools to integrate and automate workflows.
  - Task Automation: Knowledge of how to automate repetitive tasks and workflows through scripting and automation tools.
Soft Skills
- Team Interaction: Ability to communicate effectively with other technical teams.
- Ability to write reports and documentation within the scope of your functions and tasks.
- Problem Solving
  - Critical Thinking: Ability to approach and resolve complex security problems.
  - Adaptability: Ability to adapt to new threats and emerging security technologies.

Pay & benefits

What you'll get

What do we offer?

- International, positive, dynamic, and motivated work environment.
- Hybrid work model (remote/on-site).
- Flexible working hours.
- Continuous training.
- Flexible compensation plan.
- Life and accident insurance.
- More than 25 working days of vacation per year.
And many more benefits of being part of T-Systems!

If you are looking for a new challenge, do not hesitate to send us your CV. Join our team!

T-Systems Iberia will only process CVs from candidates who meet the requirements specified for each position.

The role

T-Systems, a leading multinational in Information and Communication Technologies, needs to incorporate a Cibersecurity Automation Engineer in Madrid, in Barcelona, or in Granada

You will belong to the Cybersecurity area of T-Systems, which brings together IT_Security, Network_Security, and Cybersecurity SOC services. Specifically, you will be part of the T-Systems SOC. Your main function will be to support the automation of the SOC operations currently being carried out in the area through the use and integration of multiple tools that support SOC processes. To this end, as a SOC cybersecurity engineer, you will carry out tasks related to the implementation and maintenance of SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection, and collaborate in the adaptation of configurations. You will use SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations. A deep understanding of cybersecurity principles and SIEM/SOAR systems is crucial to implementing effective automated solutions and improving defense against cyber threats.

What you'll do

Performing SIEM configurations and use cases: developing and implementing complex configurations within the SIEM system to ensure optimal detection and response capabilities, including correlation rules, filters, and data source integrations.
Developing automations and playbooks in the SOAR: developing custom scripts or automation workflows to enhance the automation capabilities of the SOAR platform, enabling more efficient incident response and mitigation.
Integrating SOC tools via APIs to automate and improve the efficiency and effectiveness of SOC processes.
Developing scripting and programming: scripting in languages such as Python, PowerShell, or Bash to develop custom scripts for automation, integration, and data manipulation.
Optimization: continuously adjusting and optimizing SIEM/SOAR modules to improve their effectiveness over time, adapting to changes in the threat landscape and organizational needs.
Collaboration with SOC teams, Cybersecurity architecture, CuSM, and other IT teams: you will work closely with IT and other security teams to understand the infrastructure, applications, and network architecture of the organization, ensuring effective SIEM/SOAR integration.

Hiring process

Apply online through the job portal; plan for six to eight weeks from application to acceptance

Applications are accepted only through the online job portal.
Status and next steps are visible in the applicant profile's applications overview.
Group-level statement from T-Systems International, not specific to Iberia.

About T-Systems Iberia

T-Systems Iberia is the Spanish subsidiary of T-Systems, the digital services arm of Deutsche Telekom, one of the world's leading telecommunications and IT services providers. T-Systems offers a broad range of IT services including cloud computing, cybersecurity, AI, data analytics, and enterprise application management, serving large enterprises and public sector clients. With a global workforce of tens of thousands, T-Systems operates across multiple countries, and its Iberia branch is a key hub for software development, cloud architecture, and public sector digitalization projects.

In Spain, T-Systems Iberia has offices in Madrid and Barcelona, and it is a significant employer of IT professionals, particularly in areas like SAP, cloud architecture, AI, and public administration solutions. The company is known for its stable, corporate environment, offering opportunities for international professionals to work on large-scale projects for both Spanish and European clients. Many roles require English, and some require German, reflecting the company's cross-border operations. T-Systems Iberia is an attractive option for those seeking a well-established, multinational IT employer with a strong focus on innovation and public sector work.

Industry: IT Services
Founded: 2000
Employees: 30,000–50,000
Headquarters: Frankfurt, Germany
In Spain: Madrid, Barcelona
Website: t-systems.com

Good to know if you are moving

T-Systems Iberia has offices in Madrid and Barcelona, offering opportunities in two of Spain's most dynamic tech hubs.
The company is part of Deutsche Telekom, providing access to a large international network and potential career mobility across Europe.
Many roles require or prefer German language skills, which can be an advantage for German-speaking professionals.
T-Systems Iberia works extensively with the Spanish public sector, offering stable, long-term projects.
The company supports relocation and offers a multicultural work environment with employees from various countries.

In their own words

About the company & team

At T-Systems, you will find groundbreaking projects that contribute to social and ecological well-being. We want to welcome new talents like you, who bring fresh ideas, different perspectives, and who embrace challenges and continuous learning, to grow and impact society… All of this, in a fun way!
It doesn't matter when or where you work. It is about doing work that matters to move society forward. For this reason, we will do everything possible to ensure that you have all the development possibilities by offering you a support network, excellent technology, a new working environment, and the freedom to work autonomously. We support you to grow constantly both personally and professionally, so that you can leave a notable mark on society.

T-Systems is a team of around 28,000 employees worldwide, making us one of the leading global providers of integrated end-to-end solutions. We develop hybrid cloud solutions, artificial intelligence, and drive the digital transformation of companies, industry, the public sector, and ultimately, all of society.

All open roles at T-Systems Iberia