Security Analyst Tier 1

Kudelski Security; Arbo; Presencial; EUR 28.000 - 42.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Shift compensation/paid overtime

Meal allowance

Life insurance

Health insurance

Pension plan

Flexible compensation options

Descripción de la vacante

Kudelski Security busca un Analista de Seguridad de Nivel 1 para un entorno MDR/SOC de múltiples clientes. Serás la primera línea de defensa, monitorizando alertas, analizando incidentes y escalando a Tier 2 siguiendo SOPs.

Trabajarás en un turno rotativo 24/7, reportando al SOC Manager dentro de un equipo de 15-20 analistas. Se valora conocimiento de SIEM/EDR, inglés y español, y el compromiso con políticas de seguridad; formación y certificaciones serán apoyadas.

Formación

• Al menos 1 año de experiencia en ciberseguridad, operaciones de IT o campo relacionado.
• Experiencia inicial a intermedia en plataformas SIEM y/o EDR/XDR para análisis de logs.
• Conocimiento de TCP/IP, arquitectura de seguridad y MITRE ATT&CK.
• Familiaridad con metodologías de respuesta a incidentes (NIST/SANS) y fundamentos de redes y sistemas operativos.
• Conocimiento adecuado de uso de IA en contextos de seguridad.
• Conocimientos básicos de OT y conceptos centrales.
• Habilidades de comunicación oral y escrita en inglés y español.
• Certificaciones como CompTIA Security+, CySA+, CEH son valoradas.

Responsabilidades

• Monitorizar y priorizar alertas y eventos de seguridad para determinar necesidad de investigación.
• Realizar análisis de primer nivel y clasificación de incidentes siguiendo SOPs.
• Escalar incidencias sospechosas o complejas a Tier 2 con documentación clara.
• Responder a alertas dentro de SLA y documentar pasos de investigación.
• Cumplir políticas internas de seguridad y protección de datos.
• Participar en handovers de turnos para mantener continuidad de investigaciones.
• Contribuir a la satisfacción del cliente mediante una comunicación profesional y respuestas rápidas.

Conocimientos

SIEM / EDR familiarity

TCP/IP knowledge

MITRE ATT&CK

Incident response basics

English & Spanish fluency

Team player

Herramientas

SIEM

EDR/XDR

Descripción del empleo

Security Analyst Tier 1 Kudelski Security Cequelinos, Arbo, arbo, pontevedra; paradanta (comarca); provincia de pontevedra; galicia, Spain

Descripción del trabajo

Your Mission

As a Security Analyst Level 1, you are the first line of defense within our 24x7 Managed Detection & Response (MDR) operations, part of the Cyber Fusion Center (CFC) / SOC. Your mission is to monitor, triage, and validate security alerts, ensuring timely escalation of confirmed threats while maintaining high operational quality across a multi-client SOC environment.

You will operate within clearly defined procedures, using modern security tooling and AI-assisted workflows to improve investigation efficiency, documentation quality, and learning velocity—while adhering strictly to escalation paths, data-handling rules, and security policies. You are based in Madrid, Spain, working a 24/7 shift rotation (morning, evening, night, and weekends) in a permanent, full-time role, reporting to the SOC Manager within a team of 15-20 L1 Analysts.

Your responsibilities will be:

General responsibilities

• Monitor and triage security alerts generated by SIEM, EDR/XDR, firewalls, IC/OT, and other security technologies to determine if further investigation or customer action is warranted.
• Perform first-level incident analysis, validation, and classification following SOPs and playbooks.
• Escalate confirmed, suspicious, or complex incidents to Tier 2 with clear, structured, and complete documentation (what happened, evidence, scope, actions taken, recommended next steps).
• Respond to alerts and tickets within defined SLAs and document all investigation steps accurately in the ticketing system.
• Adhere to internal policies, procedures, and security best practices to protect customer and company data.
• Participate in shift handovers, ensuring continuity of investigations and clear ownership of next actions.
• Contribute to customer satisfaction by handling customer interactions professionally, communicating critical findings, providing accurate information, and ensuring requests are routed to the appropriate teams for timely resolution and support.
• Maintain strong operational discipline: correct priority, categorization, and documentation standards.

Threat monitoring & incident handling

• Validate alert fidelity by reviewing available telemetry, context, and enrichment to separate false positives from true security events.
• Perform initial scoping (impacted host/user, time window, key indicators, related alerts) using approved tools and data sources.
• Apply predefined containment or response actions only when explicitly authorized by procedures and customer runbooks.
• Collect and preserve relevant artifacts (e.g., alert context, event IDs, process names, hashes, IPs/domains) to support Tier 2 investigations.
• Support ongoing investigations by providing timely updates and evidence to senior analysts.
• Use approved AI tools to summarize alerts, logs, and timelines to accelerate triage.
• Use AI-assisted enrichment to understand unfamiliar indicators, techniques, or tool outputs.
• Identify recurring false positives, noisy detections, and tooling limitations; raise improvement suggestions through defined channels.

You are

• A team-oriented analyst comfortable working in a structured, high-tempo SOC environment.
• Methodical and detail-oriented, able to remain calm under pressure and manage multiple alerts in parallel.
• Curious and motivated to learn cybersecurity operations and modern SOC tooling.
• Clear and professional in written and verbal communication.
• Willing to work in a 24/7 shift-based operation.

You have

• More than 1 year of experience in cybersecurity, IT operations, or a related field (internships, labs, or SOC trainings), typically analyzing logs and host data to identify suspicious/abnormal activity.
• Initial to intermediate exposure to SIEM and/or EDR/XDR platforms for log analysis and detection.
• Understanding of TCP/IP, security architecture, adversary TTPs, common web attacks, and the MITRE ATT&CK framework.
• Familiarity with incident response methodologies (NIST/SANS) and fundamentals in networking and operating systems (Windows/Linux).
• Understanding of appropriate AI usage in security contexts.
• Basic knowledge of OT and its core concepts.
• Strong verbal and written communication skills for documenting findings, escalating incidents, and collaborating with customers.
• Fluent in English and Spanish (written and verbal).
• Nice to have: CompTIA Security+, CySA+, CEH, or BTL1 (or actively pursuing).

With Kudelski, you can expect

• Hands-on experience in a global MDR operation with top-tier security tooling.
• Structured progression path and coaching towards other roles.
• Training and certification opportunities.
• Competitive compensation and benefits (including shift compensation/paid overtime, meal allowance, life insurance, health insurance, pension plan, and flexible compensation options).
• Inclusive, collaborative culture in an international environment.

About Kudelski Security

Kudelski Security is a global Gartner- and Forrester-recognized provider of unique cybersecurity solutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence.

Our MDR/XDR services feature three global state-of-the-art SOCs delivering tailored, intelligence-driven protection. With 2M+ users secured and a leadership team that has built top-tier MSSPs, we provide unmatched expertise to help organizations stay ahead of threats and build strategic cybersecurity programs.

Kudelski Security is an equal opportunity employer. We are committed to creating an inclusive workplace where all individuals are treated fairly and respectfully.