Senior Cybersecurity Engineer

Description

**THE DIGITAL EVOLUTION COMPANY OF TODAY AND TOMORROW** **Lutech Sweeft** is a technological benchmark and a strategic innovation driver in Digital, Data, and AI within the Iberian market. As part of the Lutech Group, we combine our recognition as *Google Cloud Partner of the Year 2024* with over 30 years of experience as an *SAP Gold Partner*. We design comprehensive solutions that transform complex organizations into intelligent, data-driven enterprises—from building AI-ready infrastructures to optimizing critical systems. Join us to accelerate the journey toward actionable intelligence and generate measurable global impact. **Position:** ----------- We are seeking a **Senior Cybersecurity Engineer** responsible for designing, implementing, and developing the organization’s cybersecurity capabilities. You will lead detection and response operations, cloud security architecture, and offensive security exercises, exercising full autonomy in decision-making during high-complexity incidents. **Responsibilities** * Design and develop cloud security architecture, primarily in GCP and Google Workspace environments. * Lead detection and response capabilities: SIEM, SOAR, EDR/XDR strategy and operations. * Define detection use cases, develop YARA-L/correlation rules, and drive continuous SOC improvement. * Manage and coordinate complex incidents, including stakeholder communication and post-incident reviews. * Develop and automate response playbooks on SOAR platforms. * Manage ongoing exposure and vulnerability programs across infrastructure and applications. * Lead or supervise penetration tests, red team exercises, and threat hunting. * Define strategies to protect against phishing, identity-based attacks, and credential stuffing. * Establish security standards, policies, and controls tailored to the context of services/organization. * Mentor junior team members and integrate security best practices into development workflows. **Requirements:** --------------- **Technical Requirements** * Proven experience designing and operating **SIEM** solutions, preferably **Google Chronicle/SecOps, Splunk, or Microsoft Sentinel**. * Practical experience with **SOAR** platforms (Google SecOps SOAR, Cortex XSOAR, Splunk SOAR, or equivalent). * In-depth knowledge of **EDR/XDR** tools and advanced endpoint analysis on macOS, Windows, and Linux. * Advanced threat detection skills: **MITRE ATT&CK** mapping, threat hunting, and digital forensics. * Experience managing large-scale vulnerability programs (**Nessus, Qualys**, or similar). * Offensive security skills: Burp Suite, Metasploit, reconnaissance and exploitation techniques. * Cloud security experience, preferably in **GCP: IAM, VPC, Security Command Center, Cloud Logging, Context-Aware Access**. * Advanced scripting skills in **Python** for automation, integrations, and security analysis (**BigQuery, security APIs**). * Practical experience in incident response and digital forensics. * Professional English, both written and spoken (technical documentation, incident reports, communication with international clients). **Highly Valued** * Industry certifications: **CISSP, GCIA, GCIH, OSCP, GREM, Google Professional Cloud Security Engineer**. * Experience with threat intelligence programs and IOC/TTP correlation. * Experience in multi-cloud environments or using Google Workspace as corporate identity platform. * Knowledge of security frameworks: **NIST CSF, ISO 27001, CIS Controls**. * Identity protection experience: Zero Trust architecture, advanced IAM, AiTM phishing defense. * Experience with orchestration tools (n8n, Airflow) applied to security workflows. * Understanding of GDPR requirements and their practical application in enterprise environments handling confidential customer data. **Additional Information:** --------------------- Madrid, Barcelona, Seville, or Oviedo — **hybrid** mode. #LI-LV1