Nextlink is looking for a SIEM Engineer to join our team and collaborate closely with one of our most recognised clients in the pharmaceutical sector.

You will join the Cyber Intelligence & Security Operations Center, focusing on security monitoring and detection capabilities through SIEM and XDR technologies.

The role combines hands-on security engineering, use case development, automation, detection improvement, reporting, and collaboration with Security Detection, Incident Response, Risk, and Information Security teams.

Main Responsibilities

- Design, implement, and continuously improve SIEM/XDR security use cases, including fine-tuning to reduce false positives.
- Develop and maintain scripts, integrations, and APIs to enrich SIEM/XDR capabilities and automate security monitoring activities.
- Support the implementation and maintenance of simulated threats / BAS scenarios to test and improve detection use cases.
- Contribute to the evolution of security technologies in line with the defined roadmap and improve detection capabilities together with Security Detection and Incident Response teams.
- Act as a point of contact for security monitoring reports and dashboards, presenting status and updates to technical experts and management.
- Follow defined frameworks, processes, SOPs, and working instructions, ensuring compliant and up-to-date documentation.
- Collaborate with Risk and Information Security teams on identified risks, remediation, prioritisation, analysis, triage, and security monitoring improvements.

Requirements

- Degree in Computer Science, Cybersecurity, Information Security, Information Technology, or a related technical field; alternatively, equivalent relevant professional experience.
- Certifications such as Microsoft Sentinel/Defender certifications, Security+, CE, GCIH, ECIH, OSCP, or CEH are desirable but not mandatory.
- Demonstrated hands-on experience working with Microsoft Sentinel SIEM in Azure environments, including the development and fine-tuning of SIEM/XDR security use cases using Microsoft Sentinel, Microsoft Defender, or comparable technologies.
- Scripting experience with Python, PowerShell, Bash, or similar, including API integrations and automation of security monitoring capabilities.
- Experience with Breach & Attack Simulation (BAS) and simulated threat scenarios to test and improve detection use cases.
- Experience creating and managing security reports, dashboards, and ticketing workflows, ideally using ServiceNow or comparable platforms.
- Good knowledge of common security weaknesses, remediation processes, prioritization, change management, analysis, and triage.
- Ability to work within defined security processes, SOPs, documentation requirements, and cross-functional Security/Risk environments.
- Strong analytical thinking, communication, problem-solving, results orientation, agility, and teamwork skills.
- Excellent written and spoken English, with experience working in virtual, international, and multicultural environments.

📌 Senior Security Engineer (SIEM) (San Cugat del Vallés)
🏢 Next-link
📍 San Cugat del Vallés