Stefanini Group is seeking a skilled Cyber Security Services (CSS) Incident Response (IR) Engineer to join our Security Operations Center (SOC), which operates as a Managed Security Service Provider (MSSP).
As a CSS IR Engineer, you will manage security incidents, develop incident response processes, and enhance security configurations tailored to client needs. Your expertise will be crucial in reducing false positives and identifying security gaps within the client's IT infrastructure.
Work Schedule: Two rotating 8.5-hour shifts within the 7:00 a.m.-7:00 p.m. CET coverage window.
Job responsibilities:
- Own assigned security alerts, incidents, and escalated tickets, providing technical guidance and resolving investigation or response issues.
- Review and interpret investigations generated by the internal AI tool, determining whether alerts should be closed, investigated further, escalated, or converted into formal cases.
- Lead investigations across endpoint, identity, email, network, cloud, and other available telemetry sources.




- Analyze endpoint and Microsoft Entra ID activity to identify indicators of compromise, suspicious access, malicious execution, persistence, privilege escalation, lateral movement, and other adversary techniques.
- Interpret correlated investigation results from SentinelOne Singularity Data Lake, PowerQuery, Microsoft Entra ID, and other security platforms.
- Analyze patterns across automatically closed and manually reviewed alerts to identify incorrect closures, missed threats, false positives, investigation gaps, and overly aggressive automated actions.
- Propose and document corrected response logic for specific alert types, including enrichment, investigation, containment, escalation, and case creation.
- Execute or coordinate containment, eradication, and recovery activities in accordance with approved procedures and incident-response playbooks.
- Prepare P1 and P2 incident reports and maintain investigation records, including eviden

📌 Cyber Security Services Incident Response Engineer (España)
🏢 Stefanini Emea
📍 España