Senior Information Security Engineer

Senior Information Security Engineer

Jobandtalent

Madrid, ES / Remote

Job Type: Full-Time

Function: IT

Industry: Enterprise

About Jobandtalent

Job&Talent is a world-leading marketplace for essential work. We match great people with great companies through our platform.

Job Description

We are seeking a proactive and detail-oriented Senior Information Security Engineer to join our team. In this role, you will take ownership of incident management while driving the ongoing improvement of our security posture. You will play a pivotal part in safeguarding Job&Talent's systems, data, and operations, fostering a culture of security excellence, and ensuring our capabilities evolve ahead of emerging threats.

This is a fully remote position with flexibility within ±1 hour of CET.

Responsibilities:

• SecOps and Threat Detection: Improve and take ownership of incident management
• Improve detection capabilities and reduce noise for the SIEM. Create and improve playbooks. Improve email security.
• Developing security guides along with defining, implementing, and monitoring security measures to protect Job&talent.
• Improving security tooling, processes, and standards to provide security assurances across the business.
• Mentoring and guiding more junior engineers
• Cloud Security: Use our CSPM tool to monitor cloud security configurations across AWS, Azure, and Google Cloud Platform.
• Working closely with DevOps teams to integrate security into the cloud deployment environment and pipeline.
• Performing risk assessments, threat modeling, and security reviews.
• Improve logging, visibility, and evidence collection across corporate and production systems.

Requirements:

• 5+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.
• At least 3 years of experience in threat analysis, SIEM alert investigation, creating detections, reducing noise, and incident management.
• 2 years of experience with CSPM
• At least 3 years of experience working for a cloud-based, global tech product company.
• Experience with EDR/XDR tools and endpoint investigation.
• Experience with vulnerability management and risk-based prioritization