Remote SOC Analyst: Incident Response & SIEM

Talantir; Spain; Remote; EUR 42,000 - 64,000; Full time

Benefits offered by this job

Annual training budget

Private medical insurance

Flexible benefits

Team-building every two months

Telework

Internal tech communities

Great team

Job summary

Capitole Consulting is seeking a remote SOC Analyst to manage security incidents end-to-end in a 100% remote, multicultural environment. You will process alerts from tickets, emails, and calls, coordinating with users and responsible parties to apply appropriate measures.

Requirements include 4 years in a SOC or cybersecurity roles, proficiency with Splunk/CrowdStrike/Palo Alto, and fluent English. The role offers a flexible schedule and opportunities to grow within security levels.

Qualifications

• 4 years of experience as a SOC Analyst or in cybersecurity roles.
• Experience with Splunk, CrowdStrike, and Palo Alto.
• Strong knowledge of Windows, Mac, and Linux operating systems.
• Fluent English (C1), spoken and written, for calls and international coordination.
• Analytical, proactive, and able to work independently.

Responsibilities

• Identify and analyze security incidents and cyberattacks.
• Coordinate immediate measures in case of cybersecurity incidents.
• Manage and support IT security incidents (Incident Response).
• Evaluate security events in SIEM and optimize detection rules and use cases.
• Develop IT security standards and processes, supporting cross-sectional areas (forensics, malware, threat hunting).
• Contact users to investigate incidents, guide remediation, and track tickets.
• Continuously learn about attack techniques and threat scenarios.

Skills

Analytical thinking

Independent worker

English proficiency

Tools

Splunk

CrowdStrike

Palo Alto

Job description

Capitole Consulting is seeking a remote SOC Analyst to manage security incidents end-to-end in a 100% remote, multicultural environment. You will process alerts from tickets, emails, and calls, coordinating with users and responsible parties to apply appropriate measures.

Requirements include 4 years in a SOC or cybersecurity roles, proficiency with Splunk/CrowdStrike/Palo Alto, and fluent English. The role offers a flexible schedule and opportunities to grow within security levels.