Security Analyst

Kudelski Security; La Coruña; Híbrido; EUR 42.000 - 65.000; Jornada completa

Descripción de la vacante

Kudelski Security busca un Analista SOC Tier 2 para servir como experto en nuestra pila tecnológica, optimizar herramientas y flujos de detección, y guiar a analistas junior en técnicas de investigación avanzadas. El rol abarca mejores prácticas y mejoras continuas en un entorno SOC multi‑cliente internacional.

Se requiere al menos 4 años en operaciones de ciberseguridad, dominio de SIEM/EDR y seguridad de redes, así como fluidez en inglés.

Formación

• Experiencia mínima de 4 años en operaciones de ciberseguridad, IR o análisis de amenazas.
• Conocimientos profundos en SIEM, EDR/XDR y seguridad de redes.
• Formación universitaria en ciberseguridad o IT.

Responsabilidades

• Redactar y optimizar reglas SIEM y lógica de detección.
• Investigar incidentes complejos y coordinar respuestas.
• Mentorear analistas junior y mejorar plantillas de incidentes.
• Proporcionar soporte 24/7 para incidentes críticos.

Conocimientos

SIEM tuning

EDR/XDR

Threat analysis

Incident response

On-call support

Educación

Bachelor en Ciberseguridad / IT

Herramientas

Splunk

QRadar

Sentinel

EDR Solutions

Descripción del empleo

Descripción del trabajo

As a Tier 2 SOC Analyst, you will serve as a subject matter expert in our technology stack while optimizing security tools and detection workflows, mentoring junior analysts on complex investigation techniques, and driving continuous improvement initiatives across our multi-client SOC environment. This role demands advance analytical skills to conduct in-depth analysis of escalated security incidents from Tier 1 analysts, performing advanced threat investigations to determine attack vectors, assess impact scope, and develop comprehensive remediation strategies.

General responsibilities Adhere to policies, procedures, and security best practices. Mentor fellow Security Engineers and Security Analysts. ~ Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy Support rules factory program in improving the global set of detection Continuously improve incident templates in terms of content for the clients and in terms of automation to best support the operation Qualify, analyze, and provide recommendations for new standard data source requests Support Product teams to build best new services to fit with Operations capabilities (needs, Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources (SIEM/EDR/network) to speed up escalated investigations. Deliver high quality Incident Handling and investigation Provide 24/7 on-call support for critical security incidents outside business hours Experience in international/global environment Dynamic, with strong interpersonal and communication skills Fluent in English.

Requirements Minimum 4 years of hands‑on experience in cybersecurity operations, incident response, or threat analysis, bachelor's degree in Cybersecurity, Information Technology, Computer Science, or equivalent experience and Proven track record in a SOC and international/global environment. Advanced proficiency with SIEM platforms (Splunk, QRadar, Sentinel, etc.) Extensive experience with EDR/XDR solutions (CrowdStrike, SentinelOne, Microsoft Defender, etc.) Deep understanding of network security technologies (firewalls, IDS/IPS, network monitoring) Strong knowledge of Windows and Linux/Unix operating systems and forensics Experience with cloud security (AWS, Azure, GCP) and containerization technologies Familiarity with OT/ICS environments and industrial control systems security Proficiency in scripting languages (Python, PowerShell, Bash) for automation Spanish or any other language.

If you are seeking a culture that supports growth, fosters success, and moves the industry forward, then Kudelski Security is where you need to be! As the premier provider of cybersecurity service and solutions, Kudelski Security has the most comprehensive ecosystem of security products and partners to deliver unparalleled services. Our rich and successful history with our clients is based on innovation and trust, serving clients of varying sizes and industries, including commercial, government and education. We have the proven expertise to plan, build, and run successful security programs across Data & Cloud security, Application Security, Microsoft 365 security, Data Privacy, Managed Security services, and IoT/OT security. Creative problem‑solving and the ability to tackle unique, complex projects.

About Kudelski Security: Kudelski Security, a division of the Kudelski Group (SIX: KUD.S), is an innovative, independent Swiss provider of tailored cyber and media security solutions to enterprises and public sector institutions. Our team of security experts delivers end‑to‑end consulting, technology, managed services, and threat intelligence to help organizations build and run successful security programs. Our global reach and cyber solutions focus is reinforced by key international partnerships. Kudelski Security is headquartered in Phoenix, Arizona and Cheseaux‑sur‑Lausanne, Switzerland.

For more information, please visit: opciones de teletrabajo/trabajo desde casa disponibles para este puesto.