Role Description Transform security operations for the AI era. We are looking for a senior cybersecurity professional to help redesign how modern Security Operations Centers detect, investigate and respond to threats by combining Detection & Response expertise, security automation, AI automation and agentic AI capabilities. The role will focus on turning traditional SOC processes into intelligent, controlled and scalable workflows, where AI agents can assist analysts, automate repetitive tasks, enrich investigations, recommend actions and accelerate response while maintaining human oversight, auditability and security control. This is a hands-on architecture role at the intersection of SecOps, SIEM/SOAR, Detection Engineering, Incident Response and AI-native automation. The ideal candidate will help organizations move from manual, ticket-driven security operations toward a new operating model where analysts, automation and AI agents work together to increase speed, consistency and resilience. What will you do? - Analyze current SOC processes (L1/L2 workflows, alert triage, escalation paths). - Identify opportunities to automate and improve detection & response. - Convert manual playbooks into structured, automated workflows. - Design how AI agents assist analysts in triage, investigation and response. - Define decision trees, enrichment logic and automation patterns. - Establish clear boundaries between automation, AI and human decisions. - Design human-in-the-loop models for critical actions. - Ensure all automation is secure, explainable and auditable. What makes this role unique? - Work at the intersection of Security Operations (SecOps). - Detection & Response. - SIEM / SOAR automation. - Incident Response. - AI-driven security operations (Agentic AI). Qualifications - 6+ years of experience in cybersecurity (SOC, SecOps, Detection & Response, etc.). - Strong background in security automation, SIEM or SOAR. - Experience designing or improving detection use cases and incident response workflows. - Hands-on experience working with SOC environments (L1, L2, L3). - Ability to translate analyst knowledge into automation and workflows. - Understanding of incident lifecycle, enrichment and escalation processes. - Experience working with technical teams and business stakeholders. - Practical mindset: ability to design solutions that work in real environments. - Fluent in Spanish and English. Requirements - Experience with Microsoft Sentinel, Defender XDR or Security Copilot. - Experience in SOC automation / SOAR implementations. - Knowledge of detection engineering and MITRE ATT&CK. - Experience with KQL, SPL or similar query languages. - Exposure to AI-driven workflows or automation. - Experience in SOC transformation programs or MSSP environments. Benefits - Salary determined by the market and your experience 🤑. - Flexible schedule 35 Hours / Week 😎. - Fully remote work (optional) 🌍. - Flexible compensation (restaurant, transport, and childcare) ✌. - Fully free health insurance, with a co-payment for dental services 🚑. - Individual budget for training or equipment and free Microsoft certifications 📚. - English lessons 🗽. - Birthday day off 🌴🥳. - Monthly bonus for electricity and Internet expenses at home 💻. - Discount on gym plan and sports activities 🔝. - Plain Camp (annual team-building event) 🎪. - Extra perks: events attendance and speakers, welcome pack, baby basket, Christmas basket, discount portal for employees ➕. - The pleasure of always working with the latest technological tools! Company Description Plain Concepts is a global company of over 500 people passionate about technology and innovation. Since our founding, we have grown through technical proficiency and confidence in ideas that others might consider risky, creating custom solutions for our clients. With offices in more than 6 countries, our mission is to continue to drive cutting-edge projects around the world. We are highly committed to technical excellence. We are known for developing highly customized projects, offering specialized technical consultancy and training. Thanks to the great work of our technicians, we have been recognized for our ability to lead innovative projects that generate value, from artificial intelligence to blockchain, driving solutions that help companies optimize their performance.

• Plan, design, and execute manual and automated test cases to validate product functionality, performance, and security. • Perform functional, regression, smoke, and integration testing, ensuring coverage of positive, negative and edge cases. • Map test cases to business requirements and functional designs, ensuring complete traceability. • Document and report defects, verify bug fixes, and ensure timely resolution in collaboration with development teams. • Maintain a strong understanding of processes, system flows, and data requirements to validate overall system behavior. • Develop and maintain automation frameworks to enhance efficiency, maintainability, and scalability. • Implement automation scripts using Java and Selenium WebDriver, leveraging design patterns such as the Page Object Model. • Integrate automated tests into CI/CD pipelines and identify opportunities to optimize test execution within DevOps workflows. • Continuously evaluate and recommend new technologies, tools, or processes that improve QA effectiveness. • Partner with QA Lead, developers, and product managers to define acceptance criteria and clarify requirements. • Contribute to the definition and execution of the team’s quality assurance strategy and test plans. • Support the transition of existing manual test cases into automated suites where appropriate. • Evangelize quality assurance best practices within the engineering team.

• Collect and evaluate hacking tools; continuously monitor emerging attack techniques and tools that could impact company products. • Perform security testing on OEM mobile phones using hacking tools and techniques. • Reproduce and verify security issues discovered on social media, public forums, and other open sources. • Produce, manage, and maintain clear security testing reports. • Coordinate with internal teams and external parties to track, prioritize, and verify fixes for security issues.

• Design and maintain comprehensive Web/App test cases and test plans covering functionality, compatibility, and interaction • Develop and maintain UI/API automated tests using Java, Python, or JavaScript to ensure high coverage and reliability • Combine automation and manual exploratory testing to validate user scenarios and discover potential experience issues • Perform root cause analysis on test failures and production issues, and drive fixes to closure • Identify blind spots in test coverage and continuously improve automation effectiveness • Participate in testing for new features — define expected behaviors, system impact, and risk points from a user-experience perspective • Conduct App compatibility testing across devices, OS versions, and screen sizes, as well as Web cross-browser and cross-resolution testing • Participate in performance testing (page load time, App cold start / warm start, etc.) and ensure stability under high-concurrency and weak-network scenarios