Senior Security Engineer
On-siteBarcelona, Catalonia, Spain
Job Summary
Manage security tools and systems including SIEM, IDS/IPS, and endpoint protection while monitoring, analyzing, and triaging security events to identify threats. Perform incident response activities covering containment, eradication, recovery, and documentation, alongside investigating incidents to determine root causes and recommend remediation. Execute incident response playbooks and SOPs while triaging bug bounty submissions, code scanning results, and vulnerability findings to ensure remediation and validation. Collaborate with engineering teams to embed shift left security practices and assist with vulnerability scanning, segmentation testing, and penetration testing programs. Administer Identity & Access Management systems to enforce least privilege and periodic access reviews, creating dashboards for leadership visibility. Stay current with evolving threats and industry best practices to recommend posture enhancements.
Required Qualifications
- Bachelor's Degree
- Minimum 5+ years of technology project/program management
- Experience in a senior security role with a proven track record of leadership and mentorship
- Strong knowledge of security principles, technologies, and best practices, including network security, encryption, authentication, access control, and vulnerability management
- In-depth experience with security tools such as SIEM, IDS, and vulnerability scanners
- Deep understanding of cloud security concepts and technologies (e.g., AWS, Azure, GCP)
- Proficiency in scripting and automation using languages such as Python, PowerShell, or Bash
- Experience with incident response and forensics, including log analysis, malware analysis, and threat hunting
- In-depth understanding of industry standards and frameworks such as ISO 27001, NIST, PCI DSS
- Excellent analytical skills
- Self-starter with the ability to work with minimal supervision
- Experience working on large cross-functional teams, representing security on initiatives such as change management, identity and access management, policy management, and data retention
- Strong writing skills and the ability to communicate information about complex issues to stakeholders in a clear and easy to understand way
- Ability to develop creative and adaptive solutions to unique and complex inquiries
- Comfortable with a rapid-pace working environment and meeting deadlines
Desired Qualifications
- Excellent communication skills, both written and verbal, with the ability to convey technical concepts to non-technical stakeholders
- Team-focused, positive attitude, and good sense of humor
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.