Vista previa de la oferta
Cybersecurity Analyst
senior · Risk & Compliance
GROUP BNP PARIBAS
BNP Paribas Group is the top bank in the European Union and a major international banking establishment. It has close to 185,000 employees in 65 countries. In Spain we are more than 5,100 employees within 13 business lines.
Spain IT Production
Spain IT Production organization consists of CIB ITO & ITG IT Platforms and is responsible for providing IT Production services to our Clients in EMEA, ensuring a Digital Market evolution, in a secured and performant environment, and with a reliable quality. IT Production organisation includes Infrastructure services, Telecom & Workspace, Production Security and Application Production domains and associated transversal services (CTO Office, Control Tower, PMO and IT Continuity). In Spain, IT Production relies on a Platform with over 400 experts that provide full-stack support services ensuring a secure, stable, standardized, and efficient production.
ABOUT THE JOB
MISSION
The Cybersecurity Analyst serves as the senior technical guardian of the Production environment, tasked with detecting, analysing and responding to cyber‑threats, whitelisting legitimate indicators, blocking malicious IOCs, and validating threat‑analysis rules in both EDR and SIEM platforms to ensure they function as intended and are fully integrated into the detection framework.
RESPONSIBILITIES
- Monitor security events in the SIEM, perform triage, and classify alerts based on severity.
- Block malicious IOCs and unblock legitimate indicators as required.
- Review and fine‑tune use‑cases (UC) to maintain optimal detection accuracy.
- Design, develop, and deploy new detection across EDR OR SIEM platforms.
- Conduct Purple‑Team review activities to identify gaps and design new detection rules.
REQUIREMENTS
Studies
- Preferred: Master’s degree or recognised professional certifications such as GREM, GCIH, OSCP Etc.
Experience
- 5-10 years
Languages
- Spanish: native or fluent (written and spoken).
- English: business‑level fluency - required for global collaboration and reporting.
- French: a plus but not mandatory.ç
SKILLS
Technical
- SIEM: Deep knowledge of log collection, correlation, advanced query writing, and dashboard development (e.g., Splunk, QRadar, ELK).
- EDR: Design, deployment and fine‑tuning of endpoint detection rules; conduct incident investigations with tools such as CrowdStrike, SentinelOne or Carbon Black
- Alert management: Full‑life‑cycle handling of security alerts—including triage, prioritisation, escalation and detailed analysis.
- DFIR: Solid understanding of cyber‑attack TTPs (Techniques, Tactics and Procedures)
Offensive & Defensive Security Tools & Methodologies
Transversal & Behavioral
- Collaborative mindset - Actively engages with teammates, shares insights, co‑creates solutions and fosters open, constructive dialogue to align security actions with business goals.
- Team‑oriented work - Contributes to a supportive environment, mentors junior colleagues, and helps balance workload to ensure collective success.
Proactive attitude - Anticipates emerging threats, initiates threat‑hunting and detection‑tuning activities, and continuously seeks improvements before incidents occur.
BENEFITS
- Training programs, career plans and internal mobility opportunities, national and international thanks to our presence in different countries.
- Diversity and Inclusion Committee that ensures an inclusive work environment. In recent years, several employee communities have been created to organize diversity and inclusion awareness actions (PRIDE, We Generations and MixCity).
- Corporate volunteering program (1 Million Hours 2 Help) in which employees can dedicate time out of their working hours to volunteer activities.
- Flexible compensation plan.
- Hybrid telecommuting model (50%).
- 32 vacation days.
Diversity and inclusion commitment
BNP Paribas Group in Spain is an equal opportunity employer and proud to provide equal employment opportunity to all job seekers. We are actively committed to ensuring that no individual is discriminated against on the grounds of age, disability, gender reassignment, marriage or civil partnership status, pregnancy and maternity/paternity, race, religion or belief, sex or sexual orientation. Equity and diversity are at the core of our recruitment policy because we believe that they foster creativity and efficiency, which in turn increase performance and productivity. We strive to reflect the society we live in, while keeping with the image of our clients.