SIEM Expert

• Work-life balance measures and flexible working hours.
• Ongoing training and certifications.
• Hybrid remote work model.
• Attractive social benefits package.
• Excellent dynamic and multidisciplinary work environment.
• Volunteering programs.

#WeAreDiverse #WePromoteEquality

We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results.
That is why we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition.

We want to meet you! 😊

Telefónica Tech is the leading digital transformation company of the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, with which we support our clients in their digital transformation.

We are a group of over 6,200 brave people who work every day from different points around the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we can't wait to meet you!

www.telefonicatech.com

Your mission will be to manage the Crowdstrike NG-SIEM platform as well as the threats generated within it.

• Administration and management of the CrowdStrike NG-SIEM platform.
• Continuous monitoring and investigation of security alerts.
• Analysis and correlation of events for threat detection.
• Preparation of technical reports, metrics, and presentations for clients.
• Analysis, classification, and response to security incidents.
• Optimization of correlation rules and detection use cases.
• Integration and validation of new log and telemetry sources.
• Implementation of continuous improvements in the service and detection capabilities.
• Definition, documentation, and transfer of operating procedures for N1 teams.
• Collaboration with Threat Intelligence and incident response teams to improve security posture.

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

• 3 years in analysis and administration of security environments (EDR - SIEM)
• Administration and management of the CrowdStrike NG-SIEM platform.
• Mass deployment and integration of sensors, connectors, and data sources.
• Administration and optimization of the CrowdStrike Falcon EDR/XDR platform.
• Continuous monitoring and analysis of security alerts.
• Investigation, contextualization, and validation of threats through Threat Intelligence.
• Management, analysis, and response to security incidents.
• Correlation of events and creation of detection use cases.
• Knowledge and analysis of network communications and protocols for incident investigation.
• Automation of monitoring, response, and remediation processes.
• Preparation of technical and executive reports for clients.
• Implementation of continuous improvements in detection and response capabilities.

• Knowledge of SIEM platforms.
• Knowledge of event correlation.
• Knowledge in the creation of use cases for security events.
• Capacity for administration, support, and deployment.
• Knowledge in incident management
• Knowledge of cybersecurity.

To perform this role, the skills that would fit well with the team and the project are:

• Passionate about security and technology.
• Willingness to always do your best, grow, and take on new responsibilities.
• Ability to learn and grow in an evolving environment.
• Excellent oral and written communication skills.
• Ability to work in an environment that requires a high level of detail and confidentiality.
• Proactive, self-motivated with the ability to work independently and as a member of a team in a challenging environment.
• Able to work both autonomously and collaboratively with colleagues in the same area or others, carrying out teamwork.
• Strong focus toward the internal client and results orientation.