Are you passionate about detection engineering, automation, and threat defense? NextLink is looking for a SIEM Engineer to join our Cyber Intelligence & SOC team to strengthen security detection capabilities for one of our top global pharma clients.

Duration: Permanent Employment

Location: Barcelona, Spain

Work Type: Hybrid- 1 day onsite per week (Fully remote option available for candidates based in Spain)

Salary: Euros 45,000 - 50,000 Gross per annum with attractive benefits

Key Responsibilities

- Detection & Use Cases: Design, implement, and fine-tune SIEM/XDR security use cases to minimize false positives.
- Automation & Integration: Develop Python, PowerShell, or Bash scripts and APIs to automate monitoring and enrich threat detection.
- Threat Simulation: Work with Breach & Attack Simulation (BAS) scenarios to continuously test and validate detection efficacy.
- Reporting & Visibility: Build ServiceNow ticketing workflows, security dashboards, and executive/technical reports.




- Cross-Functional Security: Partner with Incident Response, Risk, and InfoSec teams to triage risks and improve SOC maturity.

Key Qualifications & Skills

- Core Tech: 5+ years of hands-on experience with Microsoft Sentinel & Microsoft Defender (Azure environments).
- Scripting: Strong skills in Python, PowerShell, Bash, and API integrations.
- Detection & BAS: Experience with Breach & Attack Simulation tools and detection engineering frameworks.
- Ticketing & SOC Workflows: Familiarity with ServiceNow or equivalent ITSM platforms.
- Processes: Practical knowledge of SOC SOPs, change management, and risk triage.
- Certifications (Nice to Have): Microsoft Sentinel/Defender, Security+, CEH, GCIH, OSCP, or similar.

? Ready to elevate general cyber defenses? Slide into my DMs with your profile or hit apply below!

📌 SIEM Engineer (Barcelona)
🏢 Nextlink Group
📍 Barcelona