Cybersecurity Specialist Technician

Description

**Are you looking to develop your talent and find a place where your efforts are recognized? We offer you a dynamic, approachable, and forward-looking environment. Here, every day is a new opportunity to learn, grow, and shine. Imagine being part of a diverse team where evolution and customer service are our top priorities. At El Corte Inglés, our work is a shared passion.** **The project awaiting you.** This position aims to provide specialized capabilities in IT/OT environment monitoring and cybersecurity incident response, contributing to the early detection, analysis, and management of events and incidents that may affect the availability, integrity, and confidentiality of the organization’s technological systems and industrial environments. The role combines infrastructure technology operations and monitoring functions with defensive cybersecurity activities (Blue Team), participating in the continuous supervision of monitoring platforms, security systems, and detection tools, as well as in the analysis, investigation, and coordination of incident response. Key objectives include correlating and analyzing alerts originating from IT and OT systems; participating in incident management and technical response processes; collaborating on digital forensic investigation (DFIR) activities; and developing or improving operational procedures and incident response playbooks. The position also contributes to enhancing detection capability, operational resilience, and security maturity across monitored environments by identifying anomalies, optimizing monitoring processes, and collaborating with technical teams responsible for infrastructure, operations, and cybersecurity. **Main responsibilities and requirements.** Perform operational support tasks such as log review, data entry, reporting, and document verification to support departmental operations. Main responsibilities of the position * Coordinate and supervise IT and OT environment monitoring and incident response activities within the SOC’s operational framework, ensuring proper operation of detection and alert management services. * Manage and coordinate the technical team responsible for monitoring, event analysis, and incident response tasks—setting priorities, assigning tasks, and ensuring adherence to operational procedures. * Serve as the liaison point with the SOC service provider, supervising service quality, compliance with Service Level Agreements (SLAs), and correct execution of detection and incident response processes. * Supervise daily service operations, reviewing relevant alerts, managed incidents, technical escalations, and applied containment or mitigation actions. * Drive the evolution of monitoring and response services by identifying improvement needs in detection capabilities, operational procedures, automation, and coverage of IT and OT environments. * Optimize monitoring and incident management processes, promoting continuous improvement through reviews of detection rules, use cases, playbooks, and response procedures. * Coordinate security incident management, participating in the analysis, investigation, and tracking of relevant incidents, as well as coordinating with technical teams responsible for affected systems. * Analyze and prioritize security events and alerts, facilitating their proper classification, escalation, and handling within the incident management lifecycle. * Collaborate in digital forensic investigation (DFIR) activities when required, supporting technical investigation tasks and evidence collection. * Track and report on service performance, preparing periodic reports on monitoring status, managed incidents, operational metrics, and service evolution. * Define and maintain operational procedures and playbooks, ensuring detection, analysis, and response processes are properly documented and aligned with industry best practices. * Coordinate the integration of new capabilities or technologies into the SOC, including monitoring tools, security platforms, or additional information sources. * Promote improvements in security posture and operational resilience by collaborating with other technical teams to identify vulnerabilities, operational anomalies, or emerging risks. Manage incidents related to administrative processes inherent to the position. Prepare reports and other operational documents required in the department, using office productivity tools and corporate templates.**We offer a variety of social benefits that will contribute to your wellbeing.** * Exclusive discounts and financing options. * Life insurance. * Corporate University. * Continuous training for professional development. * Study assistance for employees’ children. * In-house medical service. * Flexible compensation plan. **If this position interests you, we invite you to apply—your experience could be highly valuable to us. At our company, everyone is welcome.**