Vista previa generada por IA
Senior Cybersecurity Operations Engineer - ODS in Madrid – High‑impact role in Santander’s digital banking transformation.
Lead SOC operations, incident response, vulnerability management and playbook automation in a hybrid environment.
Senior Cybersecurity Operations Engineer - ODS
Country: Spain
Open Digital Services is the software development company of Santander Group powering the next generation of banks by creating innovative banking products and implementing them in collaboration with Santander Group Affiliates. Santander Group is one of the world's largest financial institutions and the Eurozone's leader, we're committed to being the best Digital Bank with Branches in the industry.
Our mission at ODS is to design and support an advanced digital and omnichannel platform, ensuring the best customer experience using cutting‑edge technology. Openbank, our flagship partner, is where we develop our most advanced concepts first. Be part of our Best‑in‑Class team and help us create unique value for our customers!
Our Cybersecurity Team
Out Cybersecurity team is looking for a Security Operations Senior Engineer based out of Madrid, working in a hybrid model. You will play a key role in strengthening the maturity of our Security Operations function across ODS product environments. You will help protect critical banking platforms and services across geographies, with a strong focus on vulnerability management, threat detection, incident response and proactive security improvement. This is a highly dynamic role for a senior professional who enjoys solving different challenges every day, bringing new ideas and contributing to a continuously evolving cybersecurity capability.
We’re shaping the way we work through innovation, cutting‑edge technology, collaboration and the freedom to explore new ideas. To succeed in this role, you will be responsible for:
- Monitor, investigate and correlate security events and alerts using SIEM platforms such as Splunk, QRadar, Microsoft Sentinel and CrowdStrike/Falcon.
- Lead and support incident response activities, including triage, containment, coordination, root cause analysis and basic forensic investigation.
- Own and improve vulnerability management processes, including identification, prioritization, remediation follow‑up and reporting, while bringing new ideas to increase team maturity.
- Manage and operate security tools such as DLP, firewalls or proxys ensuring proper configuration, analyzing alerts and events. Propose and implement adjustments to policies and rules to enhance threat detection and prevention capabilities increasing effectiveness and reducing the exposure surface.
- Collaborate with Cyber Threat Intelligence / CTU and CERT‑related teams to anticipate threats, enrich detections and improve the organization’s overall security posture.
- Design, implement and optimise playbooks in SOAR platforms to accelerate and standardise security operations actions.
- Contribute to threat analysis, event correlation, security automation, executive and technical reporting, and participation in red team / blue team exercises and penetration testing initiatives.
WHAT YOU’LL BRING
Our people are our greatest strength. Every individual contributes unique perspectives that make us stronger as a team and as an organization. We’re enabling teams to go beyond by valuing who they are and empowering what they bring.
The following requirements represent the knowledge, skills, and abilities essential for success in this role. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
Professional Experience
- 6-8 years of experience in cybersecurity, preferably in Security Operations Center (SOC) or Security Operations environments. (Required)
- Hands‑on experience in incident response, alert management, vulnerability management and threat analysis across enterprise environments. (Required)
- Experience in regulated sectors such as banking, financial services or consulting environments supporting large organisations. (Preferred)
- Experience in participating in an on‑call rotation. (Preferred)
Hard Skills
- Strong knowledge of vulnerability management, incident response, Cyber Threat Intelligence / CTU, SIEM tools and SOAR platforms; understanding of networks, systems and security architecture. (Required)
- Experience or working knowledge in ethical hacking / pentesting, including tools such as Burp Suite or OWASP ZAP. (Required)
- Cloud security exposure in AWS, Azure or GCP is a plus. (Preferred)
- Scripting or programming experience in Python, Bash, PowerShell, JavaScript, TypeScript or similar, with the ability to automate security tasks and workflows. (Preferred)
Languages
- Spanish (Required)
- English B2-C1, with the ability to participate in meetings and communicate effectively in international environments. (Required)
Soft Skills
- Strong analytical thinking and sound judgment under pressure, especially during incident response scenarios.
- Broad technical perspective, curiosity and continuous improvement mindset, with the ability to bring ideas and raise the maturity level of the team.
- Excellent collaboration and stakeholder management skills, including diplomacy, clear communication and the ability to work with highly specialised and junior profiles alike.
WE VALUE YOUR IMPACT
Your contribution matters , and it’s recognised. You can expect a fair, competitive reward package that reflects the impact you create and the value you deliver. But we know rewards go beyond numbers.
We offer more than just a paycheck— our benefits are designed to support your life, your goals and your well‑being, now and into the future.
Your health is our priority. Through BeHealthy, our global wellness programme, we promote Holistic well‑being
We know family is everything . That’s why we offer parental leave, childcare support and family‑friendly programmes tailored to each life stage.
We’re enable our teams to go beyond through global opportunities and broad career paths.
We believe in the power of helping . You can dedicate part of your working hours to volunteering
We’re here to keep you motivated , help you reach your goals, and celebrate your progress, every step of the way.
Join to tackle exciting tech challenges in an agile environment, benefiting from learning, growth and local and international career opportunities in a modern, diverse setting.
ODS is an equal opportunity employer.
All applicants will be considered as equal without paying attention to gender identity, sexual orientation, ethnicity, religion, age, political orientation, union membership nor disability status.
We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify, and build.
The personal data you provide as well as any data generated during the selection process are confidential and will be processed by Open Digital Services, S.L. with registered office at Plaza de Santa Bárbara 2, 28004 (Madrid), Madrid, Spain for the sole purpose of managing your participation in the selection processes and, where appropriate, to formalise your recruitment.
For further information about your rights and data protection, please read the Open Digital Services Privacy Policy applicable to this type of data processing here