Senior Cyber SOC Analyst: SIEM/EDR Incident Response

EY; Málaga; On-site; EUR 50,000 - 75,000; Full time

Benefits offered by this job

Restaurant d'entreprise

Indemnités de stage/alternance

Job summary

EY GDS is seeking a Security Analyst with expertise in SIEM, EDR and NSM to join our cyber security team in Málaga. You will assist clients in detecting and responding to security incidents using SIEM, EDR and NSM tools.

You will perform second-level incident validation, coordinate containment and remediation, and provide real-time analysis and reporting. Strong English and 3+ years of hands-on experience are required; certification in SIEM platforms is a plus.

Qualifications

• 3+ years hands-on experience in SIEM/EDR/NSM solutions.
• Bachelor's degree (B.Tech./B.E.) with sound technical skills.
• Certification in SIEM platforms.
• Strong command of English (verbal and written).
• Willingness to work 24x7 shifts.

Responsibilities

• Operational support using SIEM/EDR/NSM for multiple customers.
• Second level incident validation and detailed investigation.
• Coordinate containment, eradication and recovery with clients.
• SIEM support activities including reporting and basic troubleshooting.
• Advise customers on best practices and use cases for successful outcomes.
• Provide near real-time analysis, investigation, remediation and tracking of security activities.

Skills

Splunk

Azure Sentinel

CrowdStrike Falcon LogScale

Fidelis

ExtraHop

ELK Stack

Carbon Black

Tanium

Defender

Security Monitoring

Incident Response

Regex

SQL

Education

B.Tech./B.E.

Tools

Splunk

Azure Sentinel

CrowdStrike Falcon LogScale

Fidelis XPS

ExtraHop

Claroty

Nozomi Networks

Carbon Black

Tanium

Defender

Job description

EY GDS is seeking a Security Analyst with expertise in SIEM, EDR and NSM to join our cyber security team in Málaga. You will assist clients in detecting and responding to security incidents using SIEM, EDR and NSM tools.

You will perform second-level incident validation, coordinate containment and remediation, and provide real-time analysis and reporting. Strong English and 3+ years of hands-on experience are required; certification in SIEM platforms is a plus.