Team Lead Detection Security Engineering (hybrid)

Location: Madrid, M, ES

Join Swiss Re and lead a team of passionate and dedicated professionals – helping Swiss Re to fulfil its mission in making the world more resilient. As the Team Lead of Detection Security Engineering, you'll own a high-performing engineering team focused on delivering high-quality, near-real-time cybersecurity detections. What's more, you'll be working in a hybrid setup, perfectly balancing work from home and the office premises.     

About the team

The Security Team is the focal point for all security activities across Swiss Re. We are responsible for cybersecurity engineering and operations, corporate security, governance, operational resilience, risk and compliance. We define and advance the company's security strategy. As a part of the Security Team, the main aim of the Detection Security Engineering team is to develop, improve, and maintain innovative threat-driven and intelligence-led use cases for the Security Incident Response team to detect malicious activity aimed at Swiss Re. We're looking for a highly experienced cyber security professional with a strong background in engineering and team-leading skills.

In your role, you will…

• Lead the Detection Security Engineering team for Swiss Re
• Be accountable for the delivery of high-quality, threat-driven detection and the availability of the required logs in our SIEM (security information and event management)
• Be someone who believes in continuous innovation, is curious and relentless in finding a better way every day 
• Be a leader who understands that it takes a diverse set of skills and individuals to form a highly effective operations team 
• Lead, inspire, and develop the Detection Security Engineering team by establishing an environment which enables autonomy and mastery for all team members 
• Provide a development programme which enables all staff to continuously enhance their skills and provide space for continuous learning and growth for the team 
• Actively contribute to the development of our overall strategy as an active member of the leadership group
• Be a key stakeholder in regular Purple Team activities, driving the execution of coordinated activities
• Foster a close and well-aligned relationship with the Incident Response team
• Advise on the prioritisation of new detections and the onboarding of new log sources
• Ensure quality standards are met or improved for detections

Your qualifications

• What we need from you

  • Passion, drive and a belief in the value of developing, improving, and maintaining innovative, threat-driven, and intelligence-led use cases as an enabler of business performance

  • Experience in leading teams in complex corporate environments

  • The ability to communicate with a broad spectrum of stakeholders

  • A track record of successful delivery in leading high-performance teams.

  • Demonstrated expertise and a high level of motivation as a leader for an international team with the ability to work in a hybrid setting

  • Being fluent in data and analytics and knowledgeable of using data in driving operational improvement

  • Integrity, result-oriented approach, and composure under pressure

  • Strong communication, influencing, and collaboration skills

  • Excellent command of both written and spoken English

  • Well-versed in translating cyber threat intelligence into actual detections

  • Experience in creating detections aligned with industry-standard frameworks in an enterprise environment

• Nice-to-have

  • In-depth knowledge of the full technology stack used in enterprise environments

  • Practical experience in agile methodologies and principles

  • Knowledge of DevSecOps practices

  • Experience working as an incident responder, reverse engineer, or malware analyst