Your Task

T-Systems, a leading multinational in Information and Communication Technologies, is hiring a Cybersecurity Automation Engineer for their Madrid, Barcelona or Granada locations. This position is part of the T-Systems Cybersecurity area, specifically within the T-Systems SOC (Security Operations Center). The role focuses on supporting the automation of SOC operations through the use and integration of multiple tools that support SOC processes.

As a cybersecurity engineer at the SOC, you will implement and maintain SIEM/SOAR platforms to analyze security events, configure alerts for proactive threat detection, and collaborate in adapting configurations. You'll utilize SOAR tools to automate incident responses, improving efficiency and effectiveness in cybersecurity operations. A deep understanding of cybersecurity principles and SIEM/SOAR systems is essential for implementing effective automated solutions and improving defense against cyber threats.

Responsibilities

Perform SIEM configurations and use cases: Develop and implement complex configurations within the SIEM system to ensure optimal detection and response capabilities, including correlation rules, filters, and data source integrations.
Develop automations and playbooks in SOAR: Create custom scripts or automation workflows to improve the automation capabilities of the SOAR platform, allowing for more efficient incident response and mitigation.
Integrate SOC tools through APIs to automate and improve the efficiency and effectiveness of SOC processes.
Develop scripts and programs: Write code in languages such as Python, PowerShell or Bash to develop custom scripts for automation, integration and data manipulation.
Optimize systems: Continuously adjust and optimize the SIEM/SOAR modules to improve their effectiveness over time, adapting to changes in the threat landscape and organizational needs.
Collaborate across teams: Work closely with SOC teams, Cybersecurity Architecture, CuSM, and other IT teams to understand the organization's infrastructure, applications, and network architecture, ensuring effective SIEM/SOAR integration.