Cyber - SIEM Engineer at Deloitte

✨ The Stack take on this Deloitte job

• 🏢 Deloitte has 3 jobs here, 3 with visa sponsorship see all
• 🛂 Visa: Highly Qualified Professional permit. Education: Higher education degree guide
• 💡 No salary shown. Ask Deloitte if it is above the minimum.

Updated 2026-11-06, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/cyber-siem-engineer-deloitte

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "cyber-siem-engineer-deloitte": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Design, deploy and maintain SIEM architectures across client environments (on-premise and cloud).
- Install, integrate and tune diverse log sources and ETL processes for reliable data collection.
- Develop and optimize detection rules, correlation logic and use cases to reduce false positives.
- Automate incident workflows and playbooks to improve response times and operational efficiency.
- Manage and secure cloud SIEM components (AWS, Azure, GCP) and apply DevOps practices for repeatable deployments.
- Run PoCs and evaluate new security technologies; generate monitoring and performance reports.
- Support incident investigations and provide actionable recommendations to stakeholders.

Requirements:
- Degree or technical qualification in IT/Computer Science (CFGS/degree/master) or equivalent experience.
- Minimum ~3 years in SIEM engineering or security operations (L2/L3), with hands-on experience in platforms such as Splunk, QRadar, Microsoft Sentinel or XSIAM.
- Solid understanding of cloud security, log collection, DevSecOps and incident response processes.
- Scripting/automation skills and familiarity with DevOps tooling for deployments.
- High level of English for international project communication; strong teamwork and client-facing skills.
- Security certifications (SIEM/vendor certs) are a plus.

Responsibilities

Design and implement SIEM architectures, install and integrate diverse data sources, and optimize correlation rules; automate security processes and incident response; manage cloud environments and report on security monitoring performance.

Requirements

Bachelor/master's in technology; at least 3 years in SIEM-related tasks; strong English; solid knowledge of security architecture, cloud environments, and DevSecOps; security certifications valued.

Key skills

• SIEM — in 26 other listings on The Stack
• Splunk — in 8 other listings on The Stack
• QRadar — not in any other listing on The Stack
• Microsoft Sentinel — in 1 other listing on The Stack
• Google SecOps — not in any other listing on The Stack
• Palo Alto XSIAM — not in any other listing on The Stack
• CrowdStrike NGSIEM — not in any other listing on The Stack
• AWS — in 807 other listings on The Stack
• Azure
• Google Cloud
• DevOps
• Incident response

On The Stack (as of 2026-11-06)

• Deloitte has 2 other listings on The Stack, 2 of them marked as offering visa sponsorship.
• 79 visa-sponsored jobs in Spain on The Stack, posted in the last 60 days.

Frequently asked questions about Deloitte

Is this Cyber - SIEM Engineer role still open?

It was posted on 2026-11-05 and is listed as active on The Stack. Confirm on Deloitte's application page before applying.

Does Deloitte offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on Deloitte's site.

Where is this role located?

The listing gives the location as Madrid, ES, Spain. It is marked on-site.

What skills does this role ask for?

The listing names: SIEM, Splunk, QRadar, Microsoft Sentinel, Google SecOps, Palo Alto XSIAM, CrowdStrike NGSIEM, AWS, Azure, Google Cloud, DevOps, Incident response.