Security Engineer

About the Position

We are seeking a Security Engineer to join our team and enhance our security infrastructure. This role involves managing SIEM, AV/EDR, DLP platforms, and cloud security.

Working Conditions

• Cooperation model: B2B contract
• Contract type: Permanent cooperation
• Probation period: 3 months
• Work location: Hybrid in Valencia / remote worldwide
• Working hours: Standard business hours
• Compensation: Competitive, aligned with experience and qualifications

Responsibilities

• Administrate and maintain the SIEM platform, log pipeline, and data ingestion infrastructure
• Create, tune, and optimize SIEM detection rules based on requirements from the SOC Team and Red Team findings
• Onboard new log sources and maintain existing log integrations across the environment
• Administrate the AV/EDR platform including policy management, exception handling, and reporting
• Administrate the DLP platform at a technical level - platform configuration, policy enforcement rules, and integration maintenance (policy ownership remains with the IS Team)
• Manage vulnerability scanning infrastructure, track findings, automate reporting workflows, and optimize the remediation coordination process with IT to reduce mean time to patch
• Develop security automation scripts and custom integrations between security tools
• Resolve integration and tooling challenges across SOC, Red Team, and IS teams
• Provide technical support and troubleshooting for all security tooling across the team
• Administrate Cloud Security Posture Management (CSPM) tooling and maintain cloud security configurations
• Maintain inventory and lifecycle management of all security tools
• Enforce endpoint security baseline and coordinate patch management with IT

Requirements

• 3+ years in security engineering, security operations, or a hybrid DevSecOps/SecOps role
• Solid hands-on SIEM administration experience with strong KQL proficiency - Microsoft Sentinel experience is preferred but candidates with deep KQL skills and experience on other platforms (Splunk SPL, Elastic EQL) will be considered
• Experience writing and tuning detection rules covering lateral movement, persistence, exfiltration, and command and control scenarios
• Practical experience with AV/EDR platform administration at policy and configuration level
• Experience with DLP platform administration at the technical level (Microsoft Purview, Forcepoint, or similar)
• Hands-on vulnerability management experience (Tenable Nessus, Qualys, or similar) including automation of scan scheduling and finding workflows
• Scripting proficiency in Python, PowerShell, or Bash for automation and integration tasks
• Understanding of log formats, syslog, API-based log ingestion
• Solid Windows and Linux system administration fundamentals
• English - working proficiency for technical documentation

Nice to Have

• Experience with Fortinet stack (FortiGate, FortiMail, FortiAnalyzer, FortiEMS) - directly relevant to our environment
• Experience with Cloudflare WAF configuration and custom rule writing
• Cloud Security Posture Management (CSPM) experience (Microsoft Defender for Cloud, Wiz, or Prisma Cloud)
• Experience integrating security tools via REST API
• Familiarity with SOAR platforms and automation playbook development
• Knowledge of Azure or AWS environments from a security administration perspective
• Certifications: SC-200, GCIA, CompTIA CySA+ or equivalent

We Offer

• Competitive compensation aligned with experience and qualifications
• Stable long-term cooperation within a structured ICT environment
• Opportunity to work in a hybrid model with flexibility to work remotely worldwide

About the Company

[Company description if present]