Bosal Group BOSAL is a Dutch privately owned company, mainly known as a global Tier 1 automotive supplier, in business since 1923. We employ about 2200 people in 16 production facilities of which the largest ones are situated in Czechia, Mexico, Turkey, Brasil, US and South Africa. Our corporate research center is based in Belgium, next to that we run 5 other R&D satellites worldwide. Currently we are looking for a Security Monitoring Engineer in Querétaro (Mexico). Responsibilities Designing, implementing, and operating a SIEM platform (e.g. Microsoft Sentinel or equivalent). Onboarding and normalizing logs from: Palo Alto firewalls and Prisma Access; Cisco switches, WLC's, ISE, and Catalyst Center; Windows and Linux servers; Microsoft 365 and identity services; critical applications and SaaS platforms. Defining, prioritizing and maintaining detection use cases aligned with asset criticality and risk. Developing and maintaining detection rules and use cases. Designing and documenting incident response workflows and playbooks. Correlating incidents with asset criticality, vulnerability and exposure data. Supporting TISAX evidence for monitoring, logging and incident handling. Continuously improving detection coverage and reducing false positives. Ensuring monitoring and incident response capabilities are demonstrably effective and audit‑ready. Qualifications Experience with SIEM platforms, such as Microsoft Sentinel, Splunk or similar. Strong knowledge of log ingestion and parsing (syslog, APIs). Expertise in security monitoring and detection engineering. Experience with Windows and Linux logging. Knowledge of network and firewall logging concepts. Relevant certifications are considered an asset. Experience 4+ years in security operations or SOC‑related roles. Experience building or significantly extending SIEM platforms. Experience in heterogeneous environments (network, servers, cloud). Experience with incident response processes. #J-18808-Ljbffr