Senior Cyber SOC Analyst - SIEM/EDR/NSM (24x7)

EY; Málaga; On-site; EUR 55,000 - 75,000; Full time

Job summary

EY is seeking a CMS-TDR Senior Security Analyst to join our cybersecurity team in Spain. You will assist clients in detecting and responding to security incidents leveraging SIEM, EDR and NSM solutions.

The role focuses on incident validation, detailed investigations, containment, eradication, and coordination with customers to achieve secure outcomes. The position requires hands-on experience with SIEM/EDR/NSM tools, strong English communication, and the ability to work in a 24x7 environment.

Qualifications

• B. Tech./ B.E. with hands-on SIEM/EDR/NSM experience.
• Willing to work in 24x7 shifts.
• Strong command of English (verbal and written).
• Security analyst certifications in SIEM preferred.
• Experience with cloud SIEM and endpoint protection platforms.

Responsibilities

• Operational support using SIEM solutions (Splunk, Sentinel, CrowdStrike Falcon LogScale) for multiple customers.
• Specialized in second level incident validation and detailed investigation.
• Performs incident coordination and communication with client to ensure effective containment, eradication, and recovery.
• SIEM support activities including adhoc reporting and basic troubleshooting.
• Advise customers on best practices and use cases on how to use this solution to achieve customer end state requirements.
• Provide near real-time analysis, investigating, reporting, remediation, coordinating and tracking of security-related activities for customer.

Skills

SIEM expertise

EDR/NSM monitoring

Incident response

Security monitoring

Regex/SQL

Elk stack knowledge

English proficiency

Education

B.Tech./B.E.

Certifications: CCSA, CEH, CISSP, GCIH, GIAC

Tools

Splunk

Azure Sentinel

CrowdStrike Falcon LogScale

Fidelis

ExtraHop

Claroty

Nozomi Networks

Tanium

Carbon Black

Defender

ELK Stack

Job description

EY is seeking a CMS-TDR Senior Security Analyst to join our cybersecurity team in Spain. You will assist clients in detecting and responding to security incidents leveraging SIEM, EDR and NSM solutions.

The role focuses on incident validation, detailed investigations, containment, eradication, and coordination with customers to achieve secure outcomes. The position requires hands-on experience with SIEM/EDR/NSM tools, strong English communication, and the ability to work in a 24x7 environment.