Senior SecOps Security Architect

About the role

SGS, a global testing, inspection and certification company, is looking for a Senior SecOps Security Architect in Madrid. You will protect the company's global technology landscape by combining security architecture, engineering, operational excellence and technical leadership, working across security domains with infrastructure, cloud, networking and application teams. A key focus is strengthening Security Information and Event Management (SIEM) capabilities.

Key responsibilities

• Design and improve enterprise security controls, technical standards and security baselines, and define security requirements for new infrastructure, cloud and application initiatives
• Contribute to security architecture decisions, risk mitigation and security-by-design across projects
• Own and improve key security platforms, including CrowdStrike Falcon / NG SIEM, Netskope, Cisco Umbrella and F5 WAF
• Strengthen SIEM capabilities in log ingestion, correlation, alerting, dashboards and monitoring, and develop detection rules using data from endpoint, cloud, identity, network and application sources
• Work with SOC teams to improve detection coverage, reduce false positives and enhance monitoring effectiveness
• Support incident response, threat detection, threat hunting and investigations, and contribute to remediation, forensic analysis and root cause investigations
• Identify gaps in controls, monitoring or detection and drive technical improvements
• Automate security processes, evaluate new technologies and contribute to PoCs and solution assessments
• Maintain security documentation, runbooks and procedures, and support audit and compliance activities

Required profile

• 8+ years of experience in cybersecurity, security engineering, SecOps or a related field
• Experience in large, complex or international IT environments
• Hands-on, pragmatic, able to work independently and collaborate with global technical teams

Required skills

• Strong hands-on experience with SIEM, security monitoring and incident response
• Experience with security architecture, engineering and enterprise security platforms
• Solid knowledge of endpoint, network, cloud and identity security
• Valuable: CrowdStrike Falcon / NG SIEM, Netskope, Cisco Umbrella, F5 WAF, Palo Alto, Microsoft Sentinel, Splunk, Azure Security or Microsoft 365 Security
• Certifications such as CISSP, CCSP, Microsoft Security, CrowdStrike or Palo Alto are beneficial but not essential

What we offer

• A flexible schedule and hybrid work model
• Continuous learning through SGS University and Campus
• A multinational environment with colleagues from various continents
• A comprehensive benefits platform