Overview

In this role you will design, implement, and manage security technologies globally to strengthen TD SYNNEX’s cyber protection. You will lead as a technical expert on security projects across the enterprise, shaping defenses and incident response. Expect to work across SIEM, SOAR, AI-enabled detection, and threat hunting to improve protection in on-premise and cloud environments. You will collaborate with cross-functional teams to document procedures and train staff. This is a chance to drive scalable security automation at an enterprise level.

Compensaciones / Beneficios

- Elective country-specific benefits
- Career development programs
- Life Empowerment and well-being initiatives
- Diversity, Equity & Inclusion
- General onboarding program
- Community and volunteer activities

Responsabilidades

- Develop and deploy AI-powered detection rules using ML anomaly models, Sigma/SPL/KQL, and behavioral analytics
- Build intelligent SOAR playbooks leveraging LLM reasoning for dynamic decision-making
- Implement and tune AI-driven alert triage systems with automated scoring and routing
- Manage SIEM components including index optimization, search performance, and data model maintenance
- Design prompt engineering frameworks and evaluation harnesses for security-focused LLM apps
- Build RAG pipelines using internal knowledge bases, runbooks, and threat intel




- Conduct AI-augmented threat hunting using LLMs for hypotheses and ML for anomaly detection at scale
- Develop and maintain CI/CD pipelines for detection rules, playbooks, and ML model deployments
- Technical design, implementation and support for security technologies (30%)
- Improve core security processes such as vulnerability management, threat analysis, monitoring and incident response, identity and access management (10%)
- AppSec reviews, penetration testing and red teaming to identify gaps and improve detection and automation (20%)
- Process automation and training to improve team efficiency (20%)
- Data analytics and KPI reporting for controls health (10%)
- Collects and analyzes evidence for breaches and investigations (10%)

Requisitos principales

- Bachelor’s degree with IT field of study
- 8–10 years of relevant experience
- 5+ years in security engineering with cross-domain experience (SIEM + SOAR or SIEM + Detection)
- Proficiency in SIEM query languages (SPL, KQL) and SOAR playbook development (Python, low-code platforms)
- Experience building/integrating AI/ML models for security use cases
- Strong Python skills with ML frameworks (scikit-learn, PyTorch) and LLM APIs
- Detection engineering experience (Sigma rules, MITRE ATT&CK; mapping, tuning)
- Git-based workflow for detection-as-code and infrastructure-as-code

- Clear communication
- Leadership and initiative
- Time management and organization
- SPL
- KQL
- Sigma

📌 Senior Cybersecurity Defense Specialist (Barcelona)
🏢 TD Synnex
📍 Barcelona