Job Summary: Santander is seeking a passionate SOAR Integration Engineer with a strong background in security automation, an engineering mindset, and a problem-solving attitude for its Threat Detection & Response team. Key Highlights: 1. Customer-centric transformation driven by disruptive thinking and innovation 2. Opportunity to grow, learn, and make a real impact 3. Redefining the way we work with cutting-edge technology SOAR Integration Engineer \- SDS Country: Spain **NOW IS THE TIME** Santander (www.santander.com) is evolving from a **high-impact global brand** into a **technology-driven organization**, with people at the heart of this journey. Together, we are leading a **customer-centric transformation** that values **disruptive thinking**, the courage to challenge what’s possible, and the ability to **innovate**. This is more than a strategic shift: **it’s an opportunity to grow, learn, and make a real impact**. Our mission is to help more **people and businesses thrive**. We embrace a strong risk culture and expect all our teams to adopt a proactive and responsible approach to risk management. **Santander Digital Services** is Santander’s technology and operations team. We believe deeply in aligning technology with business needs, and in how our work not only delivers value to users, people, and communities—but also fosters individual creativity. Our team of over 10,000 professionals across 8 countries (Spain, Portugal, Poland, the UK, the US, Mexico, Chile, and Brazil) develops and implements financial solutions across a broad spectrum of technologies—including Blockchain, Big Data, and Angular—on both on-premises and cloud platforms. **THE IMPACT YOU’LL MAKE** **The Threat Detection & Response team is looking for a SOAR Integration Engineer with at least 3 years of experience to work at our offices in Boadilla del Monte, Madrid.** We seek a professional passionate about security automation, with an engineering mindset and a problem-solving spirit. Someone who doesn’t just execute tasks, but questions the status quo, identifies improvement opportunities, and proposes creative solutions. If you’re motivated by building systems that protect organizations, seeing your automations operate in real time safeguarding critical assets, and being part of a team defining the future of security operations—this is your place. We are redefining how we work through innovation, next-generation technology, collaboration, and the freedom to explore new ideas. In this role, your key responsibilities will include: * **Design and Development of Integrations.** * **Maintenance and Support of Integrations.** * **Creation and Optimization of Playbooks.** * **Technical Support to SOC and Security Teams.** * **Continuous Process Analysis and Improvement.** * **Technical and Operational Documentation.** **WHAT YOU’LL BRING TO THE TEAM** Our people are our greatest strength. Each person contributes unique perspectives that make us stronger as a team and as an organization. We value who you are and empower what you bring. The following requirements represent the essential knowledge, skills, and competencies for this position. **Professional Experience** * **3 years of experience with SOAR tools (Mandatory)** * 3 years of experience in SOC environments (Desirable) **Education** * Bachelor’s degree in Computer Engineering or equivalent (Mandatory) **Languages** * English (Mandatory) **Technical Skills (Hard Skills)** * **SOAR Platforms**: Experience with CrowdStrike Falcon Fusion SOAR, Foundry, and Next-Gen SIEM (Mandatory) * **Programming Languages**: Python (Mandatory) * **APIs and Integrations**: REST APIs, JSON, XML, webhooks (Mandatory) * **Scripting and Automation**: Development of automated playbooks and workflows (Mandatory) * **SIEM/SOAR**: Practical experience with SIEM platforms (Splunk and CrowdStrike Next-Gen SIEM) and orchestration concepts (Mandatory) * **Log Analysis**: Parsing, correlation, and security event queries (Desirable) * **Security Frameworks**: MITRE ATT&CK, NIST Cybersecurity Framework (Desirable) * **Cloud Technologies**: AWS, Azure, GCP (security and APIs) (Desirable) * **Threat Intelligence Platforms**: MISP, ThreatConnect, Anomali, integration with TI feeds (Desirable) * **Certifications**: CrowdStrike Certified Falcon Administrator, CISSP, GIAC GCIH, CEH, Security+ (Desirable) * **Databases**: SQL, NoSQL for security data queries (Desirable) * **ITSM/Ticketing**: ServiceNow, Jira, integration with management systems (Desirable) **Interpersonal Skills (Soft Skills)** * **Problem Solving** (Mandatory) * **Technical Communication** (Mandatory) * **Teamwork** (Mandatory) * **Attention to Detail** (Desirable) * **Continuous Learning** (Desirable) **WE VALUE YOUR IMPACT** Your contribution matters—and we recognize it. At Santander, you can expect a fair and competitive compensation package reflecting your impact and the value you’ll deliver. Take a moment to understand what we mean: * **Limitless Growth.** We empower our teams **with global opportunities and extensive career paths**, enabling them to go further. * Flexibility that works. Enjoy a **hybrid work model**—some days remote and others in the office with your team—as well as flexible working hours. * **Continuous Learning.** Access hundreds of courses on our learning platforms, including exclusive access to our global training space: **Santander Open Academy (**www.santanderopenacademy.com) * **Competitive Rewards.** Receive a **highly competitive salary plus a bonus** for your achievements, motivating you to keep growing with us. * **Financial Benefits.** Access preferential banking conditions, special interest rates on loans, life insurance, and much more. * **Your Health Is Our Priority.** Through **BeHealthy**, our global wellbeing program, **we promote holistic wellbeing**: physical, emotional, social, and financial. * **Family Comes First.** We know family means everything. That’s why we offer childcare support and family programs tailored to every life stage. * **Always By Your Side.** Access **Santander Contigo**, our employee and family program offering legal advice, emotional support, and administrative assistance. * **Extra Benefits.** Gym/WellHub, on-site medical centers at several of our facilities, meal allowances, parking, shuttle services across various points in Madrid, plus exclusive discounts and offers for Santander employees. And this is just the beginning… we’ll tell you much more when you join! We’re here to **keep you motivated**, help you **achieve your goals**, and **celebrate your achievements** at every step of the way. **LOCAL COMPLIANCE** Santander takes pride in being an equal opportunity employer regardless of age, gender, disability, marital status, race, religion, or sexual orientation. We are committed to providing an inclusive and accessible recruitment process for everyone. If everything you’ve just read resonates with you, apply and join our team. **Ready to take the next step?**