Cyber Security - TDR Operations Manager - EY GDS Spain - Hybrid Location: Malaga

Other locations: Primary Location Only

Requisition ID: 1718313

Overview: As part of the EY-Cyber Security team, the Threat Detection & Response Operations Manager will lead operations/delivery for TDR engagements with end-to-end security incident investigation support, ensuring client SLAs and KPIs through multiple SIEM/EDR/NSM solutions.

Key Responsibilities

Oversee the process of detecting, reporting, and responding to security incidents.

Manage security tools and technologies, ensuring proper configuration and maintenance.

Lead the Security Operations Center, monitoring client network events.

Define, track, and meet Service Level Agreements for all clients.

Provide technical leadership and advise junior team members on SOC activities.

Revise standard operating policies and procedures as required.

Identify opportunities to improve security monitoring and operational tasks.

Convey complex technical security concepts to technical and non-technical audiences, including executives.

Develop and maintain productive relationships with client personnel.

Oversee automation of daily SOC tasks.

Provide strategic view and benefits to clients, working with limited resources.

Skills and Attributes

Hands‑on expertise with SIEM technologies such as Microsoft Sentinel, Splunk.





Expert knowledge in security monitoring and cyber incident response.

Knowledge of cloud security and IoT/OT is a plus.

Knowledge of network monitoring platforms such as Fidelis XPS and ExtraHop.

Knowledge of endpoint protection tools like Carbon Black, Defender, CrowdStrike.

Ability to work with minimal supervision.

Customer‑service orientation and continuous improvement mindset.

Qualifications

8–10 years of hands‑on experience operating/implementing/designing SIEM solutions.

Proven project management experience.

Strong command of verbal and written English.

B. Tech./ B.E. with sound technical skills.

Ability to work in client time zone.

Demonstrated technical acumen and critical thinking.

Strong interpersonal and presentation skills.

Certification in any SIEM platform.

Value‑add: knowledge of RegEx, Perl scripting, SQL query language, and/or certifications such as CISM, CEH, CISSP, GCIH, GIAC, SABSA, TOGAF.

Benefits

Career development opportunities with tailored training.

Hybrid work model for adaptable work‑life integration.

Well‑being programmes, including psychological support.

Volunteering opportunities within the community.

Recognition and rewards for performance.

To apply, please submit your CV in English.

📌 Cyber Security - TDR Operations Manager - EY GDS Spain - Hybrid (Madrid)
🏢 Ernst u0026 Young Advisory Services Sdn Bhd
📍 Madrid