Lead SOC Analyst: Incident Response & Threat Hunting

Syntegon Technology GmbH; Barcelona; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Travel opportunities

Job summary

Syntegon Telstar S.R.U, part of the Syntegon Group, seeks a Senior SOC Analyst to join our Terrassa (Barcelona) team. You will lead detection, triage, investigation, and response to complex security threats while serving as a technical escalation point for critical incidents.

You will mentor junior analysts, improve SOC processes, and drive maturity of our security operations, with opportunities to influence detection content and IR playbooks. Travel ~10–20% to HQ in Germany may be required.

Qualifications

• 4–6+ years in cybersecurity with 3+ years in SOC/IR.
• Deep understanding of the incident response lifecycle and multi-domain incidents.
• Knowledge of attacker TTPs and MITRE ATT&CK framework.
• Strong analytics across endpoint, network, identity, and cloud.
• Familiarity with threat intelligence concepts and how to apply them to detection and investigation.
• Experience with SOAR platforms and automated triage/response.
• Excellent written and verbal communication for incident reports.

Responsibilities

• Lead triage, investigation, and escalation of complex security alerts across endpoint, network, identity, cloud, and applications.
• Drive end-to-end incident response for significant security events with cross-team coordination.
• Conduct proactive threat hunts based on intel and adversary TTPs.
• Leverage SOAR to implement and refine automated response workflows.
• Develop and maintain IR playbooks, runbooks, and SOPs.
• Coach Tier 1–2 analysts and promote a culture of learning.

Education

GIAC / CISSP / equivalent certifications

Tools

SOAR platforms

Job description

Syntegon Telstar S.R.U, part of the Syntegon Group, seeks a Senior SOC Analyst to join our Terrassa (Barcelona) team. You will lead detection, triage, investigation, and response to complex security threats while serving as a technical escalation point for critical incidents.

You will mentor junior analysts, improve SOC processes, and drive maturity of our security operations, with opportunities to influence detection content and IR playbooks. Travel ~10–20% to HQ in Germany may be required.