Monitoring and Detection Engineer

WHAT ARE WE LOOKING FOR?

People eager to give their all and make a difference. Passionate about innovation and cutting-edge technologies.

WE WANT PEOPLE LIKE YOU...

Your mission will be to design, develop, and evolve security incident monitoring and detection capabilities across the various areas of Telefónica, identifying coverage gaps and defining and implementing the necessary use cases and alerting mechanisms.

Likewise, you will participate, from a detection perspective, in the evolution of SIEM technologies, asset integration tools, and the meta-inventory, providing specialized technical expertise to improve detection effectiveness.

THE CHALLENGES YOU WILL FACE DAY-TO-DAY

Take responsibility for the evolution of the detection and alerting capability of the assigned environment, analyzing its coverage and identifying monitoring gaps.

Define, develop, validate, and improve the use cases and alerting mechanisms necessary to detect security incidents.

Define and implement indicators and dashboards to evaluate the coverage and effectiveness of detection activities.

Analyze indicator results and identify needs and improvement opportunities for the assigned area and for the team.

Evaluate new SIEM capabilities or technologies from a monitoring perspective.

Define detection requirements, participate in their validation, and formulate technical recommendations to the SIEM Technology team regarding their applicability and evolution.

Drive the application of Machine Learning and other anomaly-based detection methods.

Define and validate use cases based on these capabilities, providing specialized knowledge to the rest of the Monitoring team to incorporate them into detection capabilities.

DO YOU IDENTIFY WITH THIS? IT'S TIME TO TAKE THE LEAP!

Proven knowledge in

Network and IT security technologies, such as IDS, IPS, firewalls, proxies, sandbox, probes, honeypots, and anti-DDoS tools, especially SIEM tools.

Security in networks and IT environments: operating systems, containers, SaaS, cloud, web servers, and application servers.

Linux and Windows systems administration.

Scripting with Bash and PowerShell.

Offensive hacking.

Artificial intelligence models and prompt customization.

Machine Learning and analytics applied to threat and anomaly detection.

Minimum of three years using Splunk or SecOps in alerting and detection generation.

Minimum of one year as a Splunk administrator or integrator.

The ability to work in a team, a high level of commitment, a proactive attitude and initiative, as well as adaptability and change management skills are required. The position requires collaboration with internal and external teams and areas to the management and an orientation towards seeking operational efficiencies.

Knowledge in the following will be valued:

Python.

Relational and non-relational databases.

Elasticsearch and Kafka.

Security regulations and certifications such as ISO 27001, ISO 27002, NIS, DORA, and ENS.

Security certifications such as CISA, CISSP, or OSCP.

Project management.

Degree in Computer Engineering, Telecommunications Engineering, or an equivalent degree.