Almerimar Networks & Systems Administration Job Listings

Cyberattack Protection Analyst, Hybrid65049363320194120

Indeed

Cyberattack Protection Analyst, Hybrid

Cyberattack Protection Analyst Cyberattack Protection and Detection Analyst (Purple) (Cybersecurity) (Cajamar Tecnología) Cajamar Tecnología A.I.E. is a Group Cajamar company comprising over 300 professionals, whose core activities focus on generative AI as the primary lever for digitalising processes and data analytics, management of technology platforms and enterprise architecture, analysis, development and maintenance of IT systems, implementation of digital solutions and collaborative services, and user support and IT service quality. What do we need? **Qualifications:** Graduates or holders of degrees in Computer Science, Telecommunications or related fields **Knowledge and/or experience:** * Minimum 5 years’ experience in threat monitoring, leading teams. * Experience in data correlation. * Minimum 5 years’ experience in SIEM administration. * Experience with XSIAM/Cortex XDR. * Ability to analyse large volumes of data. * Intermediate/advanced Python development skills. * Knowledge of authentication systems and Active Directory. * Advanced knowledge of operating systems (Linux, Windows, Kubernetes, Openshift...). * Knowledge of network protocols and technologies. * Knowledge of SIEM architecture and operation. * Familiarity with MITRE ATT&CK. * Intermediate/advanced level of English. * Mandatory knowledge of monitoring in cloud environments, preferably Azure. * Knowledge of LLM and AI models is desirable. * Experience in environments subject to financial sector regulations (DORA, SWIFT, PCI...) is desirable. **Competencies:** * Security certifications issued by SIEM vendors or related to security monitoring and operations. * Must be able to work effectively in a team. * Critical thinking with strong observational and analytical skills. * Strong written and verbal communication skills. * Good planning ability and orientation towards both objectives and processes. * Quality- and detail-oriented attitude and approach. What responsibilities will you have? Design of Security Monitoring Strategies Develop and implement security monitoring strategies, ensuring coverage of all actions and events across all organisational assets. Analyse the performance of current detection systems and implement improvements to enhance visibility and incident response capability. Ensure and drive monitoring of Cloud infrastructure. Ensure proper monitoring of all entity assets—both on-premise and cloud-based—recommending and applying necessary measures for effective monitoring. Administration and maintenance of the Corporate SIEM and its components Identify and apply best practices so that log processing and the platform operate efficiently and avoid configuration issues and/or weaknesses. Administer the SIEM infrastructure (console, collectors, orchestrators, etc.). Monitor SIEM performance and implement efficiency improvements. Log Quality Management Management of the monitoring team. Validate log integrity, completeness and format. Implement alerting mechanisms for log loss or corruption. Conduct periodic audits of log sources to ensure coverage. Develop ad-hoc integrations for log collection using Python code. Define monitoring requirements and coordinate with various departments the actions required to achieve monitoring compliance. Research and Development Stay up-to-date with the latest threats, vulnerabilities and SIEM security technologies, recommending new tools and methodologies. Resolve technical queries regarding monitoring for both the CyberSOC team and other colleagues as required. Collaboration with other teams XSIAM, SIEM, MITRE ATT&CK, LLM

Av. de la Estación, 1, b.iz loc, 04005 Almería, Spain

Cybersecurity Monitoring Lead, Hybrid65049363304707121

Indeed

Cybersecurity Monitoring Lead, Hybrid

Cybersecurity Monitoring Lead Cybersecurity Monitoring Lead (Cajamar Tecnología) Cajamar Tecnología A.I.E. is a Grupo Cajamar company comprising over 300 professionals, whose core activities focus on generative AI as the primary driver for digitalising processes and data analytics, management of technological platforms and enterprise architecture, analysis, development and maintenance of IT systems, implementation of digital solutions and collaborative services, and user support and IT service quality. What do we need? **Qualifications:** Graduates or degree holders in Computer Science, Telecommunications or related fields **Knowledge and/or experience:** Experience leading monitoring teams. Minimum 5 years’ experience in threat monitoring. Experience in data correlation. Minimum 5 years’ experience administering SIEMs. Experience with XSIAM/Cortex XDR. Ability to analyse large volumes of data. Intermediate/advanced Python development skills. Knowledge of authentication systems and Active Directory. Advanced knowledge of operating systems (Linux, Windows, Kubernetes, OpenShift...). Knowledge of network protocols and technologies. Knowledge of SIEM architecture and operation. Familiarity with MITRE ATT&CK. Intermediate/advanced English proficiency. Cloud monitoring expertise is mandatory, preferably in Azure. Knowledge of LLM and AI models is desirable. Experience in environments subject to financial sector regulations (DORA, SWIFT, PCI...) is desirable. **Competencies:** Security certifications from SIEM vendors or related to monitoring and security operations. Teamwork capability is essential. Critical thinking with strong observational and analytical skills. Strong written and verbal communication skills. Good planning ability and orientation towards both objectives and processes. Quality- and detail-oriented attitude and approach. What will your responsibilities be? Design of Security Monitoring Strategies Develop and implement security monitoring strategies, ensuring coverage of all actions and events across all organisational assets. Analyse the performance of current detection systems and implement improvements to enhance visibility and incident response capability. Ensure and drive cloud infrastructure monitoring. Ensure proper monitoring of all organisational assets—both on-premise and cloud-based—recommending and applying necessary measures for effective monitoring. Administration and maintenance of the Corporate SIEM and its components Identify and apply best practices so that log processing and the platform are efficient and free from configuration issues and/or weaknesses. Administer SIEM infrastructure (console, collectors, orchestrators, etc.). Monitor SIEM performance and implement efficiency improvements. Log Quality Management Management of the monitoring team. Validate log integrity, completeness and format. Implement alerting mechanisms for log loss or corruption. Conduct periodic audits of log sources to ensure coverage. Develop ad-hoc integrations for log collection using Python code. Define monitoring requirements and coordinate with different departments on actions required to achieve monitoring compliance. Research and Development Stay up-to-date with the latest threats, vulnerabilities and SIEM security technologies, recommending new tools and methodologies. Resolve technical queries related to monitoring for both the CyberSOC team and other colleagues requiring support. Work closely with the rest of the SOC team and other departments. SIEM, XSIAM, MITRE ATT&CK, cybersecurity

Av. de la Estación, 1, b.iz loc, 04005 Almería, Spain

Level 3 Response Analyst, Hybrid65049363288450122

Indeed

Level 3 Response Analyst, Hybrid

Level 3 Response Analyst Level 3 Response Analyst (Cybersecurity) Cajamar Tecnología A.I.E. is a company within the Cajamar Group, comprising more than 300 professionals, whose main activities focus on generative AI as the primary lever for digitizing processes and data analytics, management of technological platforms and enterprise architecture, analysis, development and maintenance of IT systems, implementation of digital solutions and collaborative services, and user support and IT service quality. What do we need? **Qualifications:** Bachelor’s or graduate degree in Computer Science, Telecommunications or related fields **Knowledge and/or experience:** * Minimum of 5 years’ experience in a similar position. * Experience with EDR/XDR technologies, platform administration and troubleshooting—primarily with PaloAlto’s XDR solution. * Advanced knowledge of MITRE ATT&CK framework techniques. * Advanced knowledge of the cyber kill chain phases. * Advanced knowledge of communications and networking. * Advanced knowledge of operating systems (Windows, UNIX), Active Directory and databases. \- Knowledge of forensic analysis. * Knowledge of cloud security architecture for Azure or AWS. * Knowledge of forensic analysis. * Experience in the Threat Hunting process. * Experience with SIEM, XDR, BAS and IPS tools. * Experience in vulnerability analysis. * Experience in log analysis, including malware-related logs. * Experience developing scripts in various languages such as Python. * Ability to work under pressure. * Ability to organize people and tasks. **Competencies:** * Possession of pentesting certifications (e.g., OSCP, CEH, eJPT) and defensive security certifications (e.g., Security Blue Team, BTL1 and BTL2). * Possession of certifications related to technological risk, cybersecurity or auditing—for example, CISA, CISM, CISSP, CEH, CHFI. * Experience in cybersecurity and information security management for clients in the banking sector or large enterprises. * Critical thinking with strong observational and analytical skills. * Strong written and verbal communication skills. * Good planning ability and orientation toward both objectives and processes. * Office software proficiency. * Quality- and detail-oriented attitude. What will your responsibilities be? Respond to alerts within defined SLAs Address events detected by monitoring systems, ensuring agreed response times. Contribute to the development of incident response capabilities Participate in creating and improving policies, procedures and tools for managing cybersecurity incidents. Analyze, respond to and escalate incidents according to procedures Follow detailed guidelines to investigate events, take initial actions or escalate as required. Analyze the origin, nature and impact of breaches Investigate incidents to generate actionable threat and vulnerability intelligence. Maintain records of actions taken Document all measures taken during incident management for traceability and continuous improvement. **Entity:** Cajamar Tecnología **Start date:** Immediate **Work location:** Almería, Valencia or Madrid That’s why—and much more—we’re waiting for you!!! SIEM, XDR, BAS, IPS

Av. de la Estación, 1, b.iz loc, 04005 Almería, Spain