Job ID: 744000003530783

Cybersecurity Automation Engineer (m/f/d) SOC SIEM/SOAR

Madrid, Barcelona, Granada

Professional

Regular

T-Systems Iberia

Your Task

T-Systems, a leading multinational in Information and Communication Technologies, is seeking a Cybersecurity Automation Engineer to join their team. This position is available in Madrid, Barcelona, or Granada. You will belong to the T-Systems Cybersecurity area, which brings together IT Security, Network Security, and Cybersecurity SOC services. Specifically, you will be part of the T-Systems SOC. Your main function will be to support the automation of SOC operations that are being carried out in the area through the use and integration of multiple tools that support the SOC processes. As a cybersecurity engineer at the SOC, you will carry out tasks related to the implementation and maintenance of SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection, and collaborate in the adaptation of configurations. You will use SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations.

Responsibilities

- Perform SIEM configurations and use cases: Develop and implement complex configurations within the SIEM system to ensure optimal detection and response capabilities, including correlation rules, filters, and data source integrations
- Development of automations and playbooks in the SOAR: Develop custom scripts or automation workflows to improve the automation capabilities of the SOAR platform, allowing for more efficient incident response and mitigation
- Integration of SOC tools through APIs to automate and improve the efficiency and effectiveness of SOC processes
- Scripting and programming development: scripting in languages such as Python, PowerShell or Bash to develop custom scripts for automation, integration and data manipulation
- Optimization: Continuously adjusting and optimizing the SIEM/SOAR modules to improve their effectiveness over time, adapting to changes in the threat landscape and organizational needs
- Collaboration with SOC teams, Cybersecurity Architecture, CuSM, and other IT teams: Work closely with IT and other security teams to understand the organization's infrastructure, applications, and network architecture, ensuring effective SIEM/SOAR integration

Your Profile

We are seeking a Cybersecurity Automation Engineer with extensive experience in SOC operations, SIEM/SOAR platforms, and automation development. The ideal candidate will have strong technical knowledge in cybersecurity fundamentals, scripting languages, and cloud security,



combined with excellent problem-solving and communication skills.

Must Have Skills

- Spanish language proficiency
- Middle English language proficiency
- University education in technical or higher IT or telecommunications engineering or other similar technical qualification
- Demonstrable experience of at least 3 years in the field of cybersecurity
- At least 2 years of experience in a SOC or similar in functions similar to those of the position
- Understanding of Security Principles: Confidentiality, Integrity, and Availability (CIA)
- Knowledge about malware, phishing, denial of service (DoS) attacks, APTs (Advanced Persistent Threats), and TTPS (attack techniques and tactics)
- Understanding the full lifecycle of incident management, from detection to remediation and post-incident reporting
- Ability to quickly identify the nature of a security incident and take initial containment measures
- Ability to delve into the technical details of an incident, using logs, network traffic analysis, and forensic analysis tools
- Familiarity with cloud computing environments (AWS, Azure, GCP)
- Experience in protecting cloud-based infrastructures and services
- Understanding network architecture and topologies
- Knowledge of common protocols such as TCP/IP, HTTP, HTTPS, DNS
- Familiarity with Windows, Linux and Unix operating systems
- Knowledge about event logging systems in different operating systems (Event Viewer on Windows, syslog on Linux)
- Familiarity with SIEM tools
- Understanding how record data is collected, normalized and stored
- Ability to create and adjust correlation rules to detect attack patterns and suspicious activities
- Ability to analyze alerts and events generated by SIEM, identify false positives and prioritize incidents
- Experience with SOAR tools
- Knowledge in creating and managing automatic playbooks and workflows to respond to security incidents
- Ability to integrate multiple security tools and systems using SOAR to improve incident response
- Ability to write scripts in Python to automate security tasks
- Experience with scripting in Bash (for Linux systems)
- Experience with scripting in PowerShell (for Windows systems)
- Ability to interact with security tool APIs to integrate and automate workflows




- Knowledge of how to automate repetitive tasks and workflows using scripting and automation tools
- Ability to communicate effectively with other technical teams
- Ability to write reports and documentation within the scope of their functions and tasks
- Critical thinking ability to address and solve complex security problems
- Ability to adapt to new threats and emerging security technologies

Nice to Have Skills

- High English language proficiency
- Master's degree or specialization in cybersecurity or similar
- Knowledge and experience in SPLUNK SIEM
- Knowledge and experience in Azure Sentinel
- Experience with SPLUNK SOAR
- Experience with Palo Alto Cortex XSOAR
- Experience with Palo Alto XSIAM
- Experience with automation in Azure Sentinel

About Us

At T-Systems, you'll find groundbreaking projects that add to social and ecological well-being. We want to welcome new talents like you, who bring fresh ideas, different points of view, who accept challenges and continuous learning, to grow and impact society... All of this, in a fun way!

It doesn't matter when or where you work. It's about doing work that matters to move society forward. For this reason, we will do our best to ensure that you have every possibility of development by offering you a support network, excellent technology, a new work environment and the freedom to work autonomously. We support you to constantly grow both personally and professionally, so that you can leave a notable mark on society.

T-Systems is a team of around 28,000 employees worldwide, making us one of the world's leading providers of end-to-end integrated solutions. We develop hybrid cloud and artificial intelligence solutions and promote the digital transformation of companies, industry, the public sector and, ultimately, of society as a whole.

Benefits

- International, positive, dynamic and motivated work environment
- Hybrid work model (teleworking/face-to-face)
- Versátil schedule
- Ongoing training
- Flexible compensation plan
- Life and accident insurance
- More than 25 working days of vacation per year

Application Information

If you are looking for a new challenge, do not hesitate to send us your CV. Join our team!

T-Systems Iberia will only process the CVs of candidates who meet the requirements specified for each offer.

Job Benefits

Work-Life Balance

- Hybrid work model (teleworking/face-to-face)
- Flexible schedule
- More than 25 working days of vacation per year

Professional Development

Ongoing training

Financial

Flexible compensation plan

Health & Insurance

Life and accident insurance

📌 Cybersecurity Automation Engineer (m/f/d) SOC SIEM/SOAR (Madrid)
🏢 T-Mobile
📍 Madrid