SIEM Engineer - Senior - EY GDS Spain - Hybrid
Ernst and Young5 days ago
Málaga, SpainSenior
Responsibilities
- Integrate cloud, identity, endpoint, network, and on-premises data sources into Microsoft Sentinel while ensuring data quality and normalization.
- Design, implement, and operate analytics rules, SIEM use cases, and hunting queries using KQL, with SPL experience as an advantage.
- Develop and maintain Azure Logic Apps playbooks and automations to enrich, orchestrate, and standardize response workflows.
- Provide hands-on technical guidance to stakeholders and clients as a subject matter expert in SIEM and Microsoft Sentinel/XDR solutions.
- Optimize detection, response, and automation capabilities through tuning, false-positive reduction, performance improvements, and maintainability efforts.
- Contribute to documentation, repeatable deployments, and detection/content-as-code practices where applicable.
Requirements
- 2–4 years of experience in SIEM engineering, including design, onboarding, use-case development, tuning, and operations.
- Hands-on experience with Azure, Windows/Linux, scripting such as Python, PowerShell, or Bash, and automation concepts.
- Experience building or operating SOAR-style automations, such as Logic Apps or playbooks, in a security operations context.
- Strong knowledge of cloud security concepts, SIEM architectures, and the MITRE ATT&CK framework.
- English proficiency at least at B2 level, written and spoken.
- Splunk experience, including SPL, data onboarding, correlations, and dashboards, and/or open-source SIEM experience with Elastic/ELK or Wazuh is preferred.
- Experience in regulated environments and familiarity with ITSM and incident workflow alignment are preferred.
- Relevant certifications such as SC-200, AZ-500, or comparable cloud/security certifications are preferred.
Benefits
- Hybrid work model in Malaga, Spain.
- Tailored training and career development programs.
- Flexible work-life integration.
- Psychological support sessions and broader well-being resources.
- Volunteering opportunities.
- Recognition programs for individual and team performance.
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.