Analista SOC (Nivel 1)

Excelia; Madrid; Presencial; EUR 32.000 - 52.000; Jornada completa

Descripción de la vacante

Excelia in Madrid operates a Security Operations Centre with a rotating shift. You review alerts from monitoring tools, determine false positives vs genuine incidents, and escalate accordingly.

You will triage against runbooks, document timelines while fresh, and identify detections that require tuning; familiarity with networks and scripting helpful but not required.

Formación

• Understands TCP/IP, DNS and HTTP well enough to read a packet capture.
• Can explain the difference between a scan and an intrusion.
• Writes clearly under time pressure.

Responsabilidades

• Triage alerts against the runbook and escalate as needed.
• Write the timeline of events while it is fresh.
• Flag detections that fire constantly and are worth tuning.

Conocimientos

TCP/IP

DNS

HTTP

Packet capture reading

Clear writing

Incident escalation

Descripción del empleo

You work in the Security Operations Centre on a rotating shift, reviewing alerts raised by the monitoring tools. For each one you check the surrounding activity, decide whether it is a false positive or a genuine incident, and escal ... ???

What you will do

• Triage alerts against the runbook and escal ...
• Write the timeline of what happened while it is still fresh
• Flag detections that fire constantly and are worth tuning

What they ask for

• Understands TCP/IP, DNS and HTTP well enough to read a packet capture
• Can explain the difference between a scan and an intrusion
• Writes clearly under time pressure

Nice to have

• Home lab
• Any SIEM exposure
• Scripting in Python or PowerShell