Overview

In this role, you will strengthen the Security Operations maturity across ODS product environments, protecting critical banking platforms. You will work with cross-functional teams to detect, analyze, and respond to security events, while improving vulnerability management and threat prevention. You will contribute to playbooks, threat intelligence collaboration, and security automation to scale operations. This is a senior, autonomous position in a dynamic, innovation-driven fintech context with impact across geographies.

Compensaciones / Beneficios

- BeHealthy wellness program
- parenteral/parental leave and childcare support
- family-friendly programs
- general opportunities and broad career paths
- volunteering support
- competitive reward package

Responsabilidades

- Monitor and investigate security events using SIEM platforms (Splunk, QRadar, Microsoft Sentinel) and endpoint telemetry (CrowdStrike/Falcon)
- Lead and support incident response activities: triage, containment, root cause analysis, and basic forensics
- Own and improve vulnerability management processes: identification, prioritization, remediation tracking and reporting
- Manage security tools (DLP, firewalls, proxies): configuration, alert analysis, and tuning policies
- Design and optimize playbooks in SOAR to standardize responses and accelerate actions




- Collaborate with Cyber Threat Intelligence / CTU and CERT-related teams to anticipate threats and enrich detections
- Contribute to threat analysis, event correlation, security automation, and participate in red/blue team exercises and pentesting initiatives
- Propose policy and rule adjustments to strengthen threat detection and reduce exposure surface
- Participate in on-call rotation and operate autonomously across a broad security scope

Requisitos principales

- 6-10 years of cybersecurity experience, preferably in SOC/security operations
- Hands-on incident response, alert management, vulnerability management and threat analysis across enterprise environments
- Experience in regulated sectors (banking/financial services) or large organizations (preferred)
- On-call rotation experience (preferred)
- Strong knowledge of vulnerability management, incident response, CTI, SIEM and SOAR
- Experience or working knowledge in ethical hacking/pentesting with Burp Suite or OWASP ZAP
- Scripting or programming for automating security tasks (Python, Bash, PowerShell, JavaScript/TypeScript) (preferred)
- Spanish language required
- English proficiency in meetings and international communication (B2-C1)

- Analytical thinking under pressure
- Curiosity and continuous improvement mindset
- Clear communication and diplomacy
- Vulnerability management
- Incident response
- Cyber Threat Intelligence / CTU

📌 Senior Cybersecurity Operations Engineer - ODS (Madrid)
🏢 Grupo Santander
📍 Madrid