Ingeniero/a - Especialista SIEM & SOAR
Core
Senior cybersecurity professional defining and optimizing security processes, implementing SIEM/SOAR technologies, and developing threat engineering use cases for the Security Operations Center.
Role type
Senior IC Security Operations Engineer (SIEM/SOAR)
Builds
Automated security playbooks, SIEM dashboards, and threat intelligence detection rules
Domain
Cybersecurity / Threat Engineering
Required skills
SIEM administration, SOAR playbook development, Threat Engineering, Splunk, Sentinel, Cortex XSIAM/XSOAR, Chronicle Security Operations, advanced query writing, alert configuration
Preferred skills
Python scripting, PowerShell, digital forensics, incident management, technical team leadership
Technologies
Splunk, Microsoft Sentinel, McAfee ESM, Cortex XSIAM, Cortex XSOAR, Chronicle Security Operations
Responsibilities
Develop and optimize SOAR automation playbooks; Design and maintain SIEM use cases, queries, and dashboards; Identify requirements for complex SIEM/SOAR use cases; Create architecture and operational documentation; Mentor technical teams on threat engineering and automated response; Collaborate with infrastructure teams on data usage best practices; Lead Threat Engineering initiatives to improve alerting and incident detection
Seniority
Senior, hands-on IC with mentorship responsibilities
