Overview In this role, you will strengthen the Security Operations maturity across ODS product environments, protecting critical banking platforms. You will work with cross-functional teams to detect, analyze, and respond to security events, while improving vulnerability management and threat prevention. You will contribute to playbooks, threat intelligence collaboration, and security automation to scale operations.

This is a senior, autonomous position in a dynamic, innovation-driven fintech context with impact across geographies.

Compensaciones / Beneficios BeHealthy wellness program parenteral/parental leave and childcare support family-friendly programs general opportunities and broad career paths volunteering support competitive reward package

Responsabilidades

Monitor and investigate security events using SIEM platforms (Splunk, QRadar, Microsoft Sentinel) and endpoint telemetry (CrowdStrike/Falcon)

Lead and support incident response activities: triage, containment, root cause analysis, and basic forensics

Own and improve vulnerability management processes: identification, prioritization, remediation tracking and reporting

Manage security tools (DLP, firewalls, proxies): configuration, alert analysis, and tuning policies

Design and optimize playbooks in SOAR to standardize responses and accelerate actions





Collaborate with Cyber Threat Intelligence / CTU and CERT-related teams to anticipate threats and enrich detections

Contribute to threat analysis, event correlation, security automation, and participate in red/blue team exercises and pentesting initiatives

Propose policy and rule adjustments to strengthen threat detection and reduce exposure surface

Participate in on-call rotation and operate autonomously across a broad security scope

Requisitos principales 6-10 years of cybersecurity experience, preferably in SOC/security operations

Hands-on incident response, alert management, vulnerability management and threat analysis across enterprise environments

Experience in regulated sectors (banking/financial services) or large organizations (preferred)

On-call rotation experience (preferred)

Strong knowledge of vulnerability management, incident response, CTI, SIEM and SOAR

Experience or working knowledge in ethical hacking/pentesting with Burp Suite or OWASP ZAP

Scripting or programming for automating security tasks (Python, Bash, PowerShell, JavaScript/TypeScript) (preferred)

Spanish language required

English proficiency in meetings and international communication (B2-C1)

Analytical thinking under pressure

Curiosity and continuous improvement mindset

Clear communication and diplomacy

Vulnerability management

Incident response

Cyber Threat Intelligence / CTU

📌 Senior Cybersecurity Operations Engineer - ODS (Madrid)
🏢 Grupo Santander
📍 Madrid