Experteer Overview
In this hands-on, individual-contributor role within a lean airline security team, you proactively identify blind spots in telemetry, detections, and controls across on-prem, endpoints and multi-cloud environments (AWS, GCP, Azure). You map gaps to MITRE ATTu0026amp;CK, run adversary emulations, and close gaps with measurable evidence. You own detections as code (Sigma to backends) and collaborate with platform owners on preventive controls. You participate in incident response, containment and post-incident learning to strengthen aviation security.

Compensaciones / Incentivos
• Own detection and visibility across AWS, GCP and Azure control planes and identity; audit-log ingestion, native security-service alerts, and misconfiguration/exposure findings feeding the gap backlog.
• Run purple-team exercises with red-team/pentest partners and convert findings into detections and mitigations.
• Hunt proactively for techniques indicated as uncovered by the coverage map.
• Lead containment,



eradication and recovery during incidents; perform forensic analysis; feed lessons back to the gap backlog.
• Automate enrichment, triage and response (SOAR, Python, PowerShell) to reduce manual toil.
• Leverage LLM assistants and agentic coding tools to speed up rule authoring, backend conversion, test-case generation and triage; validate outputs before production.
• Produce coverage and performance metrics (ATTu0026CK coverage %, gap closure rate, validation pass rate, MTTD/MTTR) for leadership.

Responsabilidades
• 6+ years hands-on in detection engineering, senior SOC analyst or incident response.
• Deep SIEM skills: Microsoft Sentinel, Splunk, Elastic (ELK) or OpenSearch; query languages (KQL, SPL, ES|QL/Lucene).
• Hands-on EDR: Microsoft Defender, SentinelOne or CrowdStrike; hunting queries and custom rules.
• Sigma, including converting and testing rules against backends.
• Multicloud security across AWS, GCP and Azure: audit/log telemetry (CloudTrail/GuardDuty

📌 Information Security (Madrid)
🏢 Ryanair
📍 Madrid