Security Monitoring Specialist - SOC - L1

Ackcent Cybersecurity; Madrid; Presencial; EUR 30.000 - 50.000; Jornada completa

Descripción de la vacante

Una empresa de ciberseguridad en crecimiento busca un Especialista en Monitoreo de Seguridad para unirse a su equipo. En este emocionante rol, tendrás la oportunidad de defender a diversos clientes contra amenazas cibernéticas, trabajando en un entorno colaborativo y dinámico. Serás responsable de monitorear alertas de seguridad, realizar investigaciones de incidentes y colaborar con equipos de soporte y seguridad. Se valoran habilidades analíticas y de resolución de problemas, así como una sólida comunicación. Si te apasiona la seguridad informática y deseas contribuir a un entorno inclusivo y diverso, esta es la oportunidad ideal para ti.

Servicios

Crecimiento profesional

Trabajo híbrido

Salario competitivo

Turnos rotativos

Formación

• Grado en Ingeniería Informática o disciplina relacionada.
• Conocimientos técnicos de fundamentos de red y protocolos de Internet.

Responsabilidades

• Monitorear alertas de seguridad en tiempo real para identificar actividades sospechosas.
• Realizar análisis en profundidad de registros de seguridad y tráfico de red.

Conocimientos

Análisis de seguridad

Resolución de problemas

Comunicación efectiva

Pensamiento analítico

Autonomía

Educación

Grado en Ingeniería Informática / Telecomunicaciones

Herramientas

SIEM

EDR

WAF

IDS / IPS

Descripción del empleo

We are Ackcent, a cybersecurity company based in Barcelona, Spain. We are specialized and exclusively dedicated to providing cybersecurity services and solutions. Our aim is to effectively protect the digital assets of our customers. Our solutions are designed to adapt to each customer’s particular cybersecurity needs, ensuring quality and project success.

Role Summary

The Security Monitoring Specialist (SMS) role is a junior level position providing an opportunity to work in a fast-paced collaborative environment defending a variety of customers and their infrastructure from cyber threats. We are looking for someone who loves working in Information Security protecting systems, identifying anomalies, capable of thinking outside the box and who is comfortable being a problem-solver. As a SMS, you will handle escalated security alerts, conduct deeper investigations, and work closely with both Customer Support Team and Security Engineers Team to mitigate potential security threats.

Responsibilities

1. Monitor real-time security alerts, security logs, and events to identify suspicious activity and potential threats across client networks and systems.
2. Perform in-depth analysis of security logs, events, and network traffic using security tools such as SIEM, EDR, and WAF logs.
3. Respond to security incidents and investigations working closely with customers and IT providers, following SLA requirements.
4. Document incident investigations, including findings, timelines, and remediation steps taken.
5. Escalate complex or high-risk incidents to Security Engineers Team, ensuring proper mitigation steps are followed.
6. Provide professional, timely, and accurate communication with clients regarding the status of security incidents, ongoing investigations, and remediation efforts.
7. Assist in optimizing SOC detection rules, workflows, playbooks, and automation processes to improve efficiency and incident response times.

Required

1. Computer / Telecommunications Engineering degree or a related discipline.
2. Technical understanding of network fundamentals and common Internet protocols.
3. Knowledge of system administration and security architecture.
4. Familiarity with the main security monitoring tools (SIEM, IDS / IPS, EDR, WAF).
5. Advanced level of English (written and spoken).
6. Fluent in Spanish.
7. Self-motivated with the ability to work independently and as a team member in a challenging environment.
8. Strong analytical and problem-solving skills with attention to detail.
9. Excellent communication skills, both verbal and written, with the ability to explain technical issues to non-technical stakeholders.

Nice to have

1. Proficient in understanding Operating Systems and their architectures: Windows, Unix / Linux, and OSX Operating Systems.
2. Experience working in IT or Cybersecurity teams.
3. Programming or Scripting in Bash, Python, or PowerShell.
4. Good understanding of Cybersecurity landscape: Cyber kill chain, TTP, Threat Intelligence, and malware distribution networks.
5. Good understanding of information security concepts: defense in depth, BYOD management, data loss protection, risk assessment, and security metrics.
6. Strong analytical and problem-solving skills.
7. Strong communication and presentation skills along with the ability to work in a highly collaborative environment.
8. Exhibits initiative, follow-up and follow through with commitments.
9. Manages multiple priorities in a high-pressure environment.
10. Related Certification (BTL1, CompTIA Security+, GSEC or CSA) is a plus.

What we offer

1. Growing company.
2. Hybrid work: mostly remote from anywhere. On-site presence may be required eventually for company events and training.
3. Competitive salary.
4. Rotating shifts: from 06:00 to 15:00 or 08:00 to 17:00.

At Ackcent we celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, marital status, status as an individual with a disability, or any other status protected or not by the laws or regulations in the locations where we operate. Ackcent will not tolerate discrimination or harassment of any kind.