SOC Security Specialist

Ecovadis; Barcelona; Híbrido; EUR 40.000 - 70.000; Jornada completa

Descripción de la vacante

Ecovadis is seeking a SOC Security Specialist to enhance security operations and align them with business goals. This role involves managing security incidents, leading SOC functions, and ensuring effective threat management. The ideal candidate will have a strong background in security operations and a passion for continuous improvement in a collaborative environment.

Servicios

Hybrid work organization

Home office allowance program

IT equipment allowance

Working from anywhere policy

Base salary + variable compensation plan

Meals and Transportation Vouchers

Health, Wellness, and Dental Benefits

Employee referral bonus policy

Access to online learning library

Co-working space opportunities

Formación

• 3+ years of experience in a similar role.
• Professional certifications (SANS GIAC / GCIH, Azure SC-200).
• Advanced knowledge of security technologies and best practices.

Responsabilidades

• Plan and control Security Operations Center (SOC) functions.
• Ensure 24x7 monitoring and incident response.
• Manage cyber-intelligence capabilities to protect the company.

Conocimientos

Security operations

Incident management

Intrusion analysis

Threat intelligence

Threat hunting

Automation

Educación

Bachelor of Science in Computer Science

Herramientas

Security Incident and Event Monitoring (SIEM)

Endpoint security (EDR)

Network security (NDR)

Microsoft Azure security solutions

Descripción del empleo

Our IT Security team is looking for a SOC Security Specialist to assist and support within a fast-growing company. You will be responsible for the correct alignment of our security needs within the security operations services, ensuring the harmonization with business strategic goals.

As the SOC Security Specialist, you will become the main point of contact and technical coordinator for Technical Crisis Response, helping with the definition and maintenance of our plans and procedures. Also, your knowledge and willingness to learn on new security trends and technologies will be of great value to our company, while identifying efficiency and automation opportunities.

This role, reporting directly to the IT Security Director, will include the following responsibilities :

• Plan, direct and control the Security Operations Center (SOC) global functions and operations;
• Ensure 24x7 monitoring, detection and analysis of incidents to protect EcoVadis, supervising that all security incidents are addressed, ensuring timely escalation, and tracking adequate remediation;
• Manage cyber-intelligence capabilities to identify and proactively protect the company against potential threats, brand abuses and risks;
• Understand SOC providers’ services, while ensuring proper prioritization, alignment and coordination with internal stakeholders;
• Responsible for security event monitoring, detecting, alerting and responding, as well as becoming the primary Security Incident Response Coordinator;
• Ensure there are adequate monitoring and detection mechanisms, challenge our providers’ security guidance, and test and update the quality of these protective measures on a regular basis;
• Revise and develop documentation and processes to strengthen the SOC function, to facilitate the integration with other business units;
• Create and maintain policies, standards and a service catalog pertaining to our SOC services, either autonomously or collaborating with the Network and Security Operations team;
• Establish security guidelines and improvements for our security operations, in collaboration with network operations (ZTNA, SWG, DLP,...);
• Become the primary point of contact for security needs within SASE operations;
• Conduct regular checks within our infrastructure to identify missing gaps in our detection capacity, and provide recommendations for improvement ( Threat Hunting);
• Control the use of resources and execute corrective actions where applicable;
• Ensure daily management, administration & maintenance of security devices to achieve operational effectiveness;
• Create reports, dashboards and metrics for SOC services, with multiple target audiences (technical and non-technical) and presentations when needed;
• Maintain our Incident and Crisis Response Plans, create and update playbooks and procedures, and conduct tabletop simulations with stakeholders;
• Ensuring threat management, threat modeling, identify threat vectors and develop use cases for security monitoring, in coordination with all SOC services;
• Be a leader in the expansion, innovation and growth of the SOC;
• Advocate for continuous improvement and automation wherever possible;
• Assist with other organization security projects and tasks as required.

Qualifications

• 3+ years of experience in a similar role, with emphasis on security operations, incident management, intrusion analysis;
• Minimum Bachelor of Science degree in Computer Science, Computer Engineering, or a related technical field;
• Professional certifications ( SANS GIAC / GCIH, Azure SC-200);
• Hands-on experience in SOC definition and strategy;
• Advanced knowledge of : Security Incident and Event Monitoring (SIEM);Behavior analysis (UEBA);EndPoint security (EDR);Network security (NDR);Threat Intelligence (CTI);Threat Hunting (TH);Security Service Edge (SSE);Web Content Filtering (SWG);Identity protection (IAM / PAM);
• In-depth familiarity with security policies, industry standards and best practices;
• Thorough knowledge of Microsoft Azure security solutions ( Sentinel);
• Experience in designing and building security operations centers from scratch, and / or expanding their services;
• Incident management process development and incident management and coordination experience;
• Experience with SOC automation development and cloud operations’ monitoring;
• Ability to lead and communicate efficiently within a team environment;
• Ability to conduct research about areas unknown to him / her, and use that knowledge to deliver security guidelines and propose improvements;
• Open to work in an international, multilingual environment;
• Proficient in English (oral and written);
• Hands-on experience with Google Workspace is a plus.

Additional Information

Location : Preffered Barcelona, remote from Spain

Our growing team in Spain is full of talented professionals from various fields who all share a desire to make sustainability real.

We offer competitive salaries and support personal growth from day one.

This includes extensive onboarding, teammates' support and a brand new e-learning platform bursting with courses and modules. So you can learn new skills and fine-tune old ones! In return for your expertise and energy, we offer :

• Casual and very friendly work environment Hybrid work organization (from the office or from home)
• Home office allowance program IT equipment allowance
• Working from anywhere policy (3 months per year)
• Opportunity to work in a truly international atmosphere
• Base salary + variable compensation plan
• Meals and Transportation Vouchers (Cobee card)

Wellness and Healthcare benefits :

• Health, Wellness, and Dental Benefits

More :

• Employee referral bonus policy
• Access to online learning library Virtual and in-person team building events
• Co working space with various services + opportunity to work in different locations (Europe and International)

Our hiring team looks forward to reviewing your CV, in English, with a guaranteed response to every application.

A new job with purpose awaits you!

Don’t fit all the criteria but still think you’d be a good candidate?

Please apply anyway to give our hiring team the opportunity to assess your skills and to learn more about what you could bring to EcoVadis. We’re interested in hiring capable people, regardless of professional and educational background.

Can the hiring process be adjusted to suit my needs? Yes.

We want everyone going through the hiring process with EcoVadis to feel confident that you are able to demonstrate your full potential. We welcome applications from disabled people, people with long-term health conditions, and neurodiverse candidates. If you need any adjustments, including the provision of interview questions, please let the hiring team know.