Descripción de la oferta
Overview
Join a global SOC team protecting critical environments from evolving threats. In this hands-on role, you’ll monitor, investigate, and respond to security incidents, collaborating with specialists across regions. You’ll enhance threat detection, triage alerts, and drive improvements in processes and documentation. This position offers exposure to leading security tools and a chance to contribute to client security outcomes in a fast-paced environment. You’ll work with cross-functional teams to stay ahead of threats and shape security practices at scale.
Compensaciones / Beneficiosremote work option in Spain or elsewhere in Europeprofessional growth and learning opportunitiesmulticultural, international teamprivate medical insurancelife insurancelunch and transport card as part of flexible remuneration pack
ResponsabilidadesMonitor, triage, and investigate security alerts across SIEM, EDR, and cloud environmentsInvestigate threats and incidents, determining root causes and remediation stepsAnalyze logs from Windows, Linux, databases, apps, web servers, firewalls, and network devicesCollaborate with Incident Response teams to contain and resolve threatsMaintain security monitoring tools and improve detection quality while reducing false positivesPrepare security reports, incident summaries, and technical findings for clientsManage security-related tickets and ensure proper incident documentationContribute to SOC process improvements, documentation, and knowledge basesEngage with clients to understand environments and optimize monitoringStay current with emerging threats, technologies, and best practices
Requisitos principales5+ years in IT, Cybersecurity, or Security OperationsHands-on SOC experience with alert triage and incident investigationStrong knowledge of SIEM and EDR technologiesExperience with Microsoft Sentinel, Splunk, QRadar, ArcSight, or ELKExperience with Microsoft security tools (Defender for Endpoint, 365, Sentinel, Azure Security, XDR)Solid understanding of Azure, AWS, and/or GCPExperience with at least one EDR (e.g., Defender for Endpoint, CrowdStrike)Strong networking knowledge and TCP/IPProficient in analyzing security logs in Windows and LinuxKnowledge of email security, network monitoring, and incident responseExperience managing and processing security ticketsExcellent written and spoken Englishproactive and collaborative mindsetstrong communicationteam-orientedSIEMEDRMicrosoft Defender for Endpoint
