The English-language job board for Spain
87,000+ live jobsHybrid in Spain·Added 5 days ago (last checked 12 Oct)
200 open roles
The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.
Nice to have
This job advert was originally written in Spanish.
AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...
Experience
+3 years in software development with Python (Java, Go, C/C++... are also valuable).
Hands-on experience developing applications with LLMs (Anthropic, OpenAI, Azure OpenAI,...).
Knowledge of SOC operations: SIEM, SOAR, EDR, and incident management.
Experience designing and consuming REST APIs.
Use of version control (Git) and working in agile environments (Jira).
To perform the role, the skills that would best fit the team and the project would be:
Curiosity and an innovative mindset.
Ability to take an idea from prototype to a useful solution.
Ability to adapt the technical message according to the audience.
Autonomy and initiative.
Teamwork.
Analytical skills and problem-solving ability.
Critical thinking.
Eagerness to learn and evolve.
Desirable:
Knowledge of MITRE ATT&CK and Threat Intelligence.
Experience with agentic frameworks (LangGraph/LangChain, LlamaIndex, CrewAI, AutoGen, Semantic Kernel or similar).
Experience with RAG and vector databases (pgvector, Elasticsearch/OpenSearch, Qdrant, Chroma...).
Knowledge of Model Context Protocol (MCP) and tool design for agents.
LLM evaluation and observability (Langfuse, LangSmith or similar) and prompt engineering.
Cloud services and managed AI (AWS Bedrock, Azure AI Foundry, Google Vertex AI).
Containers and orchestration (Docker, Kubernetes) and CI/CD tools.
Knowledge of secure development and vulnerability analysis tools (SAST, DAST, SCA).
Education
Required:
Higher Vocational Training (FP Superior) or university degree in technical areas.
Valuable: training or certifications in AI/Machine Learning or in cybersecurity.
Spanish: advanced or native.
English: upper-intermediate.
In the Future SOC unit, within the Cybersecurity Operations area at Telefónica Tech, we work on two major lines:
SOAR (Security Orchestration, Automation and Response): requirements definition, design, and development of use cases for detection, security event enrichment, and automation of responses tailored to each client.
Software Engineering Technical Office: development of custom software products and services, automation and management of cybersecurity infrastructures, security support for development to interpret findings and guide corrections, and innovation applied to the evolution of the SOC.
In this context, we are looking for an Agentic AI and Innovation Engineer with a Python development profile and experience building solutions with LLMs and AI agents, to drive the transformation of our SOC in two directions:
SOC Transformation through agentic AI: design, construction, and deployment of AI agents that assist and automate operator tasks.
Innovation in developments for SOC improvement: prototyping and evolution of new tools and products that increase the efficiency, quality, and capabilities of the service.
SOC Transformation with agentic AI
Design and develop AI agents that automate operational tasks, integrated with SOC platforms (SIEM, SOAR/XSIAM, EDR, Threat Intelligence).
Build multi-agent flows and tools (tool calling, MCP) that allow agents to query and act upon security systems.
Define evaluation mechanisms, guardrails, and human-in-the-loop to guarantee the reliability, traceability, and security of the agents.
Identify, together with the operations teams, the processes candidate for AI automation and measure their impact (MTTD, MTTR, reduction of false positives, operator workload).
Innovation in developments for SOC improvement
Develop new capabilities and accompany their evolution through to production.
Perform technological surveillance on AI applied to cybersecurity, evaluating models, frameworks, and market tools.
Develop internal tools, APIs, and integrations that improve SOC operations.
Document developments and internal procedures.
Telefónica is one of the world's largest telecommunications companies, providing fixed and mobile connectivity, digital services, and technology solutions to consumers and businesses across Europe and Latin America. With over 100,000 employees and a strong presence in Spain, the UK, Germany, and Brazil, the company operates through brands such as Movistar, O2, and Vivo, and has expanded into areas like cybersecurity, cloud, IoT, and AI through its innovation units.
In Spain, Telefónica is headquartered in Madrid and is a major employer of tech talent, with a strong focus on cybersecurity, data, and AI. The company actively hires international professionals, offering roles in English and fostering a diverse, innovative culture. Its Spanish operations are central to its global strategy, making it a relevant option for internationals seeking to work in a large, established tech and telecom player in Spain.
Telefónica Tech is the leading digital transformation company of the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, with which we support our clients in their digital transformation.
We are a group of over 6,200 brave people who work every day from different points around the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we can't wait to meet you!
www.telefonicatech.com
#WeAreDiverse #WePromoteEquality
We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results.
Therefore, we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition.
We want to meet you! 😊
or browse Mid-level·Hybrid·IBEX 35·Telecommunications & Connectivity·Cybersecurity·Spanish Brands·Telecom
This role involves training and collaborating on innovative cybersecurity projects, including threat analysis and AI application. It offers a monthly stipend and a hybrid working model.
This role involves supporting the management and coordination of cybersecurity and AI innovation initiatives.
This role involves designing and leading end-to-end technical architectures for large-scale outsourcing projects.
Account Executive managing a portfolio of large public administrations. The role involves designing commercial strategies and coordinating technical proposals. Based in Málaga, Spain.
Senior Product Manager to lead digital product vision and strategy. You will manage roadmaps, stakeholders, and cross-functional teams using data and AI.
This role involves maintaining TV and broadcast systems within the engineering and external support area.
Leads design of Telefónica Group's global security reference architecture and selects the enabling technologies. Acts as technical reference across cloud, network, identity and AI security areas.
A Level 2 Cybersecurity Technician will manage security services for Data Centers. The role involves firewall management, SIEM event review, and vulnerability tracking.
This role involves designing and leading end-to-end technical architectures for large-scale outsourcing projects.
This role involves leading the end-to-end deployment of complex audiovisual and technological projects.
This role involves designing, validating, and evolving WAN connectivity solutions for large clients. You will provide technical expertise in SD-WAN and traditional networking technologies.
Lead and execute military communication projects involving 5G and SATCOM technologies. The role offers professional development, hybrid work, and a comprehensive benefits package. Based in Madrid.
Remote, Anywhere within Spain
Remote from Spain
€117k - €150k
🇬🇧 🇪🇸Hybrid in Boadilla del Monte
