Overview In this role you will design, implement, and manage security technologies globally to strengthen TD SYNNEX's cyber protection. You will lead as a technical expert on security projects across the enterprise, shaping defenses and incident response. Expect to work across SIEM, SOAR, AI-enabled detection, and threat hunting to improve protection in on-premise and cloud environments.

You will collaborate with cross-functional teams to document procedures and train staff. This is a chance to drive scalable security automation at an enterprise level.

Compensaciones / Beneficios Elective country-specific benefits

Career development programs

Life Empowerment and well-being initiatives

Diversity, Equity & Inclusion

General onboarding program

Community and volunteer activities

Responsabilidades

Develop and deploy AI-powered detection rules using ML anomaly models, Sigma/SPL/KQL, and behavioral analytics

Build intelligent SOAR playbooks leveraging LLM reasoning for dynamic decision-making

Implement and tune AI-driven alert triage systems with automated scoring and routing

Manage SIEM components including index optimization, search performance, and data model maintenance

Design prompt engineering frameworks and evaluation harnesses for security-focused LLM apps

Build RAG pipelines using internal knowledge bases, runbooks, and threat intel





Conduct AI-augmented threat hunting using LLMs for hypotheses and ML for anomaly detection at scale

Develop and maintain CI/CD pipelines for detection rules, playbooks, and ML model deployments

Technical design, implementation and support for security technologies (30%)

Improve core security processes such as vulnerability management, threat analysis, monitoring and incident response, identity and access management (10%)

AppSec reviews, penetration testing and red teaming to identify gaps and improve detection and automation (20%)

Process automation and training to improve team efficiency (20%)

Data analytics and KPI reporting for controls health (10%)

Collects and analyzes evidence for breaches and investigations (10%)

Requisitos principales Bachelor's degree with IT field of study

8–10 years of relevant experience

5+ years in security engineering with cross-domain experience (SIEM + SOAR or SIEM + Detection)

Proficiency in SIEM query languages (SPL, KQL) and SOAR playbook development (Python, low-code platforms)

Experience building/integrating AI/ML models for security use cases

Strong Python skills with ML frameworks (scikit-learn, PyTorch) and LLM APIs

Detection engineering experience (Sigma rules, MITRE ATT&CK; mapping, tuning)

Git-based workflow for detection-as-code and infrastructure-as-code

Clear communication

Leadership and initiative

Time management and organization

SPL

KQL

Sigma

📌 Senior Cybersecurity Defense Specialist (Barcelona)
🏢 TD Synnex
📍 Barcelona