Experteer Overview In this role, you will help clients detect and respond to security incidents using SIEM, EDR, and NSM tools within EY's cyber security team.
You will support multiple customers with monitoring, investigation, and containment activities, and translate findings into actionable guidance and improvements.
You'll work closely with clients and cross-functional teams to ensure effective remediation and recovery, while advising on best practices.
This position offers a hands-on, client-facing opportunity to shape security outcomes at scale.
Compensaciones / Ventajas
• Provide operational support for SIEM (Splunk, Sentinel, CrowdStrike Falcon LogScale), EDR (CrowdStrike, Defender, Carbon Black) and NSM (Fidelis, ExtraHop) across multiple clients
• Perform second-level incident validation and detailed investigations
• Coordinate security incidents and communicate with clients to ensure containment, eradication and recovery
• Support SIEM activities including ad-hoc reporting and basic troubleshooting




• Advise clients on best practices and use cases to achieve end-state requirements
• Deliver near real-time analysis, investigation, reporting, remediation, coordination and tracking of security activities for customers Responsabilidades
• B. Tech.
/ B.
E. with strong technical skills
• Ability to work in 24x7 shifts
• Strong command of English (verbal and written)
• Demonstrate technical acumen and critical thinking
• Strong interpersonal and presentation skills
• Minimum 3 years of hands-on experience in SIEM/EDR/NSM
• Certification in any SIEM platform
• Knowledge of RegEx, Perl scripting and SQL
• Certifications: CCSA, CEH, CISSP, GCIH, GIAC Requisitos principales
• Support, coaching and feedback from engaging colleagues
• Opportunities to develop new skills and progress your career
• Freedom and flexibility to handle your role in a way that suits you

📌 Cyber Soc (Málaga)
🏢 EY (Ernst u0026 Young)
📍 Málaga