Security Operations Engineering Lead

Cybersecurity is becoming a core engineering capability at Adevinta.
We're creating a lean internal security team supported by an AI-first Managed Detection & Response service operating 24x7.
We're looking for an experienced Security Operations Engineering Lead to own our security operations, detection engineering and incident response capabilities while working alongside our external SOC partner.

Requirements

• Strong hands-on experience in Security Operations
• Experience leading Incident Response
• Experience with Detection Engineering
• Experience working with SIEM, EDR and SOAR technologies
• Strong understanding of cloud security and modern enterprise environments
• Scripting or automation experience (Python, APIs, Infrastructure as Code is a plus)
• Excellent stakeholder management skills
• Engineering mindset focused on automation and continuous improvement

Nice to have:

• Experience working with MDR providers
• AWS security experience
• MITRE ATT&CK knowledge
• Threat Hunting experience
• Relevant certifications (GCIA, GCIH, GCFA, CISSP...)

Responsibilities

You'll be responsible for building and operating Adevinta's modern Security Operations capability.
Responsibilities include:

• Own day-to-day Security Operations
• Lead Incident Response activities across the organisation
• Drive Detection Engineering and continuously improve detection coverage
• Manage the relationship with our AI-first MDR / external SOC partner
• Develop security automations to reduce analyst workload
• Coordinate threat hunting activities
• Improve security monitoring across cloud, endpoints and corporate platforms
• Define and optimise playbooks and response procedures
• Manage vulnerabilities from an operational response perspective and coordinate remediation with engineering teams
• Produce operational metrics and executive reporting
• Act as the internal technical owner for Security Operations technologies
• Continuously improve operational maturity through automation and AI

Benefits

• Build a Security Operations capability from day one
• Work with AI-first security technologies
• High technical ownership
• Influence the future security architecture
• Hybrid working model
• Competitive compensation
• Direct impact protecting millions of users across Spain