Cyber Security - TDR Operations Manager - EY GDS Spain - Hybrid

Location: Malaga

Other locations: Primary Location Only

Requisition ID:

Overview: As part of the EY-Cyber Security team, the Threat Detection & Response Operations Manager will lead operations/delivery for TDR engagements with end-to-end security incident investigation support, ensuring client SLAs and KPIs through multiple SIEM/EDR/NSM solutions.

Key Responsibilities:

- Oversee the process of detecting, reporting, and responding to security incidents.
- Manage security tools and technologies, ensuring proper configuration and maintenance.
- Lead the Security Operations Center, monitoring client network events.
- Define, track, and meet Service Level Agreements for all clients.
- Provide technical leadership and advise junior team members on SOC activities.
- Revise standard operating policies and procedures as required.
- Identify opportunities to improve security monitoring and operational tasks.
- Convey complex technical security concepts to technical and non-technical audiences, including executives.
- Develop and maintain productive relationships with client personnel.
- Oversee automation of daily SOC tasks.
- Provide strategic view and benefits to clients, working with limited resources.

Skills and Attributes:

- Hands‑on expertise with SIEM technologies such as Microsoft Sentinel, Splunk.




- Expert knowledge in security monitoring and cyber incident response.
- Knowledge of cloud security and IoT/OT is a plus.
- Knowledge of network monitoring platforms such as Fidelis XPS and ExtraHop.
- Knowledge of endpoint protection tools like Carbon Black, Defender, CrowdStrike.
- Ability to work with minimal supervision.
- Customer‑service orientation and continuous improvement mindset.

Qualifications:

- 8–10 years of hands‑on experience operating/implementing/designing SIEM solutions.
- Proven project management experience.
- Strong command of verbal and written English.
- B. Tech./ B.E. with sound technical skills.
- Ability to work in client time zone.
- Demonstrated technical acumen and critical thinking.
- Strong interpersonal and presentation skills.
- Certification in any SIEM platform.
- Value‑add: knowledge of RegEx, Perl scripting, SQL query language, and/or certifications such as CISM, CEH, CISSP, GCIH, GIAC, SABSA, TOGAF.

Benefits:

- Career development opportunities with tailored training.
- Hybrid work model for adaptable work‑life integration.
- Well‑being programmes, including psychological support.
- Volunteering opportunities within the community.
- Recognition and rewards for performance.

To apply, please submit your CV in English.

#J-18808-Ljbffr

📌 Cyber Security - TDR Operations Manager - EY GDS Spain - Hybrid (Málaga)
🏢 Ernst & Young Advisory Services Sdn Bhd
📍 Málaga