Senior Cybersecurity Operations Engineer - ODS

About the role

Join Santander's Open Digital Services (ODS) team in Madrid as a Senior Cybersecurity Operations Engineer. You will help protect critical banking platforms by strengthening the Security Operations function across ODS product environments, focusing on vulnerability management, threat detection, and incident response.

Key responsibilities

• Monitor, investigate and correlate security events using SIEM platforms such as Splunk, QRadar, Microsoft Sentinel and CrowdStrike Falcon.
• Lead incident response activities, including triage, containment, root‑cause analysis and basic forensic investigation.
• Own and improve vulnerability management processes, from identification to remediation tracking and reporting.
• Manage security tools (DLP, firewalls, proxies) and adjust policies to enhance threat detection and reduce exposure.
• Collaborate with Cyber Threat Intelligence and CERT teams to anticipate threats and enrich detections.
• Design, implement and optimise playbooks in SOAR platforms to standardise security operations.
• Contribute to threat analysis, security automation, reporting and red‑team/blue‑team exercises.

Required profile

• Several years of experience in security operations, incident response and vulnerability management.
• Strong analytical mindset with the ability to work in a fast‑paced, hybrid environment.
• Excellent communication skills to coordinate with cross‑functional teams.

Required skills

• SIEM tools: Splunk, QRadar, Microsoft Sentinel, CrowdStrike Falcon.
• Security tooling: DLP, firewalls, proxies.
• SOAR platforms and playbook development.
• Vulnerability management and incident response processes.
• Threat detection, security automation and event correlation.