Job Description
T-Systems, a leading multinational in Information and Communication Technologies, needs to hire a Cybersecurity Automation Engineer in Madrid, Barcelona or Granada. You will belong to the T-Systems Cybersecurity area, which brings together IT Security, Network Security and Cybersecurity SOC services. Its main function will be to support the automation of SOC operations that are being carried out in the area through the use and integration of multiple tools that support SOC processes. To this end, as a cybersecurity engineer at the SOC, you will carry out tasks related to the implementation and maintenance of SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection and collaborate in the adaptation of configurations. You'll use SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations. A deep understanding of cybersecurity principles and SIEM/SOAR systems is crucial for implementing effective automated solutions and improving defense against cyber threats. Perform SIEM configurations and use cases: Develop and implement complex configurations within the SIEM system to ensure optimal detection and response capabilities, including correlation rules, filters, and data source integrations. Development of automations and playbooks in the SOAR: Develop custom scripts or automation workflows to improve the automation capabilities of the SOAR platform, allowing for more efficient incident response and mitigation. Scripting and programming development: scripting in languages such as Python, PowerShell or Bash to develop custom scripts for automation, integration and data manipulation. Collaboration with SOC teams, Cybersecurity Architecture, CuSM, and other IT teams:



You'll work closely with IT and other security teams to understand the organization's infrastructure, applications, and network architecture, ensuring effective SIEM/SOAR integration. Spanish, Middle English, valuable High English. University education in technical or higher IT or telecommunications engineering or other similar technical qualification. Highly valuable master's degree or specialization in cybersecurity or similar. Demonstrable experience of at least 3 years in the field of cybersecurity, at least 2 of them in a SOC or similar in functions similar to those of the position. Technical Knowledge Cybersecurity fundamentals and basic knowledge: Incident Analysis: Ability to delve into the technical details of an incident, using logs, network traffic analysis, and forensic analysis tools. Cloud security: Familiarity with cloud computing environments (AWS, Azure, GCP) and experience in protecting cloud-based infrastructures and services. Knowledge in Networks and Systems. Understanding network architecture and topologies. Operating Systems: Familiarity with Windows, Linux and Unix operating systems. Event Log: Knowledge about event logging systems in different operating systems (for example, Event Viewer on Windows, syslog on Linux). Very valuable knowledge and experience in SPLUNK SIEM and/or Azure Sentinel. Data Intake and Normalization: Understanding how record data is collected, normalized and stored.



Alert Analysis: Ability to analyze alerts and events generated by SIEM, identify false positives and prioritize incidents. Knowledge and experience in SOAR (Security Orchestration, Automation, and Response) SOAR platforms: Experience with SOAR tools such as SPLUNK SOAR; Palo Alto Cortex XSOAR and/or XSIAM, automation in Azure Sentinel, etc. Workflow Automation: Knowledge in Automation and Scripting Scripting languages Python: Ability to write scripts in Python to automate security tasks. Bash/PowerShell: Experience with scripting in Bash (for Linux systems) and PowerShell (for Windows systems). Task Automation: Knowledge of how to automate repetitive tasks and workflows using scripting and automation tools. Ability to adapt to new threats and emerging security technologies. Hybrid work model (teleworking/face-to-face). Ongoing training. Your Task T-Systems, a leading multinational in Information and Communication Technologies, is hiring a Cybersecurity Automation Engineer for their Madrid, Barcelona or Granada locations. This position is part of the T-Systems Cybersecurity area, specifically within the T-Systems SOC (Security Operations Center). The role focuses on supporting the automation of SOC operations through the use and integration of multiple tools that support SOC processes. As a cybersecurity engineer at the SOC, you will implement and maintain SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection, and collaborate in adapting configurations. You'll utilize SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations. A deep understanding of cybersecurity principles and SI

📌 Cybersecurity Automation Engineer Soc Siem/Soar (Barcelona)
🏢 T-Systems
📍 Barcelona