30 окт

Defensive security engineer in detection and response

ориентир по рынку
вакансия зп не указана
в среднем 353 643 ₽
Загрузи резюме, чтобы видеть мэтчи с вакансиейЗагрузи резюме, чтобы видеть мэтч с вакой

подготовься к отклику

ai-инструменты

Чтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме

описание

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services. Our mission: Securing Together! We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure. As part of our growing team, we’re looking for a Senior Defensive Security Engineer based in Barcelona. You’ll join the security operations team of a major international digital player, helping take its defensive capabilities to the next level.

задачи

  • Build automations and integrations that speed up day-to-day operations and incident handling.
  • Own and optimize the defensive security stack so it stays reliable and scales with the business.
  • Improve alert quality by cutting noise and closing detection gaps.
  • Design dashboards and KPIs that show the health and effectiveness of security operations.
  • Partner with security and engineering teams to strengthen protection and response across the organization.
  • Support and coach less experienced team members.

требования

  • 5+ years in security operations, SOC engineering, or detection and response.
  • Hands-on experience running incidents from first alert through to lessons learned.
  • Strong expertise with SIEM/XDR solutions, including detection rule writing and tuning.
  • Experience turning threat intelligence into actionable detections, with good knowledge of MITRE ATT&CK.
  • Practical experience with DLP policies.
  • Solid coding skills in Python or Go, with experience working with APIs and SOAR automation.
  • Ability to explain technical risks clearly to both engineers and leadership.
  • Fluent English.
  • Будет плюсом: GIAC GCIH / GCIA / GCDA, BTL2, or vendor certifications on major SIEM/XDR platforms

условия

  • Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
  • Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
  • Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
  • Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.

Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.