Specialist Information Security Engineer

We offer you the opportunity to join the leading Spanish company in the IT sector, with more than 25 years of experience and one of the most solid track records as a provider of technological solutions for companies. We are a growing company with more than 400 employees and offices in Logroño, Madrid, Barcelona, Seville, Bilbao and Valencia. Since August 2013, we have been part of the IONOS Group, Europe's leading digitalisation partner for small and medium-sized companies. In short, we are a multicultural team that's passionate about technology, bringing our professional experience from over a dozen countries: Germany, Argentina, Spain, the United States, France, the Philippines, Italy, Poland, Portugal, the United Kingdom, Romania… As a Security Engineer focused on Infrastructure and the Security Operations Center (SOC), you will be the guardian of our underlying platforms and the eyes-and-ears of our detection capabilities. You will architect, harden and operate SOC tooling such as Splunk, Suricata-based IDS and Windows Defender EDR, translate every new technology that joins the company into actionable, monitored assets. This role offers you the chance to shape a modern, data-driven security operation while working hand-in-hand with operating teams. Tasks Collaborate with administrators to integrate their applications and services into Splunk. Create, test, and operationalize detection use cases aligned with MITRE ATT&CK, internal threat models, and regulatory frameworks while coordinating alert enrichment with product owners. Plan, build and expand our SOC infrastructure by utilizing Splunk Enterprise, Splunk apps and admin tools, e.g. Ansible, n8n, Kubernetes. Deploy, tune, and maintain Splunk, Windows Defender Custom Detection, and Suricata IDS rules to ensure security baselines and drive detection capabilities, hardening, and audit policies. Produce clear runbooks, hardening guides, and procedural instructions and deliver regular training to administrators and leadership on infrastructure security best practices and SOC capabilities. Qualifications The basis for this challenging position is in-depth experience in the field of information security. You also have the intrinsic motivation and passion to keep your knowledge up to date. You have a degree in Computer Science or a comparable qualification, ideally with a specialization in Information Security. Expertise in creating end-to-end Splunk use cases, Defender Custom Detection rules and Suricata IDS rules. Ability to work across engineering, cloud, and business units; fluently present technical findings to non-technical stakeholders. You have experience with OS security, such as hardening Windows and Linux. You are familiar with Python, Bash, or PowerShell for scripting and automation. Familiarity with compliance frameworks such as NIS2, KRITIS, ISO 27001, and the ability to map controls to technical implementations. You are able to communicate proactively and confidently in English. Benefits Hybrid working model (3/2) in one of our offices in Logroño, Alcobendas, Barcelona, Sevilla or Valencia. Flexible working hours through trust-based working hours. Various employee discounts for activities and products. Employee events such as summer and winter parties, as well as workshops. Numerous training and development opportunities. Various health offers, such as sports and health courses. At Arsys, we value diversity and welcome all applications regardless of, for example, gender, nationality, ethnic or social origin, religion, disability, age, as well as sexual orientation and identity, physical characteristics, marital status, or any other irrelevant factor subject to applicable law. #J-18808-Ljbffr