24 hours ago
Barcelona, SpainSenior
Responsibilities
- Design, implement, enhance, manage, and support global security technologies and infrastructure.
- Improve vulnerability management, threat analysis, security monitoring, incident response, and identity and access management processes.
- Conduct application security reviews, penetration testing, and red-team activities, using findings to improve detection and response automation.
- Develop AI-powered detection rules using ML anomaly models, LLM-generated Sigma/SPL/KQL, and behavioral analytics.
- Build and maintain SOAR playbooks, AI-driven alert triage systems, prompt engineering frameworks, evaluation harnesses, and security-focused RAG pipelines.
- Manage SIEM components, including index optimization, search performance, and data model maintenance.
- Conduct AI-augmented threat hunting and develop hypotheses and anomaly analysis at scale.
- Develop and maintain CI/CD pipelines for detection rules, playbooks, and ML model deployments.
- Automate and orchestrate processes, document procedures and runbooks, and train support teams.
- Produce data analytics and KPI reporting to assess operational effectiveness and control health.
- Collect, preserve, analyze, and present computer-related evidence for security breaches, vulnerability mitigation, and investigations.
Requirements
- Bachelor's degree in an IT field.
- 8 to 10 years of relevant work experience.
- At least 5 years of security engineering experience with cross-domain experience such as SIEM plus SOAR or SIEM plus detection.
- Proficiency in SIEM query languages including SPL and KQL, and in SOAR playbook development using Python and low-code platforms.
- Experience building or integrating AI/ML models for security use cases.
- Strong Python skills and familiarity with scikit-learn, PyTorch, and LLM APIs.
- Experience with detection engineering, Sigma rules, MITRE ATT&CK mapping, and rule-tuning methodology.
- Proficiency with Git-based workflows for detection-as-code and infrastructure-as-code.
- Security and technology certifications and/or equivalent proven work experience.
- Strong communication, presentation, leadership, organizational, interpersonal, and time-management skills, including the ability to work independently under pressure.
Benefits
- Country-tailored elective benefits.
- Formal leadership and professional development programs and on-demand courses.
- Financial, physical, and mental well-being programs, seminars, events, and a global Life Empowerment Assistance Program.
- Diversity, equity, and inclusion programs and communities.
- Onboarding and networking opportunities with new co-workers during the first 30 days.
- Peer-led communities, business resource groups, volunteering events, and environmental and social initiatives.
- On-call availability is required as necessary, with occasional non-standard work hours or overtime and some travel.
Categories
About TD SYNNEX
TD SYNNEX distributes IT hardware, software, and cloud services and aggregates solutions for technology vendors and resellers, including VARs and system integrators. It provides logistics, financing, cloud marketplaces, and professional services that help partners procure, bundle, and deploy technology for end customers. The public company (NYSE: SNX), headquartered in Fremont, California, was formed in 2021 through the merger of Synnex and Tech Data and operates globally.