Cybersecurity: Senior Monitoring Engineer

<p><strong>About us!</strong><br/><br/>TradingView was founded in 2011 in New York and London with a mission to empower millions of people to achieve success, whatever that means to them. We're building a space where anyone can maximize their chances of succeeding through financial markets because they've got all the best tools and data at their fingertips. Our product portfolio includes best-in-class charts, versatile commercial libraries, a social network, and many more tools for retail and business audiences, trusted by fintech leaders such as <strong>Revolut, Binance, and CME Group.</strong></p><p>Now, we're the world's largest financial analysis platform – used by 100 million people, in over 180 different countries. Even Antarctica. Every day, millions of users open TradingView for analysis, collaboration, and finding better trading opportunities. We foster a community-driven approach to financial education, welcoming everyone from seasoned traders to beginners. </p><p dir="ltr">To be on top of the game, we’re looking for passionate people to join our team, where product quality is everything. <strong>If you’re ready to do your best work, collaborate with cutting-edge technologies, and make an impact on millions every day, look no further.</strong><br/></p><p dir="ltr"><strong><br/></strong></p><p dir="ltr"><strong>About your mission! - Make an impact 🚀</strong><br/><br/>With us you will:<br/></p><p><strong>SIEM Architecture &amp; Deployment</strong></p><ul> <li>Assist in evaluating and selecting the right SIEM platform</li> <li>Design and implement SIEM infrastructure (on-prem or cloud)</li> <li>Define log onboarding strategy and scalable architecture</li> </ul><p><strong>Log Parsing &amp; Onboarding</strong></p><ul> <li>Work with infrastructure and application teams to collect logs from cloud, containers, Linux systems, and applications</li> <li>Build parsers and normalization rules to structure incoming log data</li> <li>Ensure completeness, consistency, and health of log pipelines</li> </ul><p><strong></strong><strong>Detection Engineering</strong></p><ul> <li>Develop, test, and deploy correlation rules mapped to MITRE ATT&amp;CK</li> <li>Create alerting logic to detect suspicious behaviors, misconfigurations, or compromise</li> <li>Fine-tune rules to reduce false positives and align with business context</li> </ul><p><strong>Incident Response Support</strong></p><ul> <li>Assist in investigating security incidents using SIEM and other tools</li> <li>Provide visibility and context to the InfoSec team during incident analysis</li> <li>Improve detections and logging based on post-incident reviews</li> </ul><p><strong>Content &amp; Dashboarding-</strong></p><ul> <li>Build dashboards and visualizations for monitoring key security events</li> <li>Create custom searches and scheduled reports for internal teams</li> </ul><p><strong>SOAR &amp; Automation Readiness</strong></p><ul> <li>Prepare SIEM for future integration with SOAR.</li> <li>Document alert outputs and workflows to support automation</li> </ul><p><strong>Collaboration</strong></p><ul> <li>Work with InfoSec, DevOps, and IT to ensure log coverage and high-fidelity detections</li> <li>Provide recommendations to improve monitoring and visibility across environments</li> </ul><p><br/></p><p><strong></strong><strong>What makes you the perfect fit 🤝</strong></p><ul> <li>3–5+ years of experience in security engineering or monitoring roles</li> <li>Strong hands-on experience designing or operating a SIEM (any major platform: Splunk, Elastic, Sentinel, QRadar, etc.)</li> <li>Proficient in log parsing, normalization, and custom rule development</li> <li>Comfortable working with AWS, GCP, Kubernetes, Docker, and Linux log sources</li> <li>Solid scripting ability (Python, Bash, PowerShell, or similar)</li> <li>Familiar with MITRE ATT&amp;CK, detection logic design, and alert tuning</li> <li>Able to work independently in a small team with broad responsibility</li> </ul><ul> </ul><p dir="ltr"><em>Nice to have: </em></p><ul> <li>Certifications such as **GCFA**, **CPIA**, or platform-specific certs (Splunk, Elastic, etc.)</li> <li>Exposure to SOAR platforms and security automation concepts</li> <li>Experience in early-stage security team setup or greenfield projects</li> </ul><p><br/></p><p>It’ll also be an advantage if you have experience in:</p><ul> <li>Finance experience or knowledge of Trading</li> <li>Knowledge of TradingView 😁 We also love users who become teammates!</li> </ul><ul> </ul><ul> </ul><p dir="ltr"><strong><br/></strong></p><p dir="ltr"><strong>Additional information<br/><br/></strong>This is a hybrid role based in our Málaga office, located in the heart of the city at the prestigious Muelle Uno port.</p><p dir="ltr"><strong><br/></strong></p><p dir="ltr"><strong>About our perks and benefits</strong><strong><strong></strong></strong></p><ul> <li>Permanent Contract</li> <li>Flexible Working Hours – Start your day when it suits you best withi