Senior Cyber SOC L3 Manager – 24/7 Incident Response

EY; Málaga; Híbrido; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Flexible Work-Life Integration

Well-being programs

Volunteer opportunities

Recognition programs

Resumo da oferta

EY GDS Spain in Málaga is seeking a seasoned Security Operations specialist to join our 24/7 incident response team. You will lead high-severity incident handling, perform forensic analyses, and coordinate with IT and security peers to safeguard client environments.

You’ll work with SIEM and EDR tools, develop and refine playbooks, and mentor junior responders while reporting to stakeholders. This hybrid role offers continuous learning, flexible work-life integration, and opportunities to impact

Qualificações

• 5+ years of security related experience in Security Operations, Incident Response and Forensic Investigation.
• Proficient with SIEM solutions for incident response and analysis (Splunk, Microsoft Sentinel, LogScale, Chronicle, QRadar or equivalent).
• Experience with EDR/XDR platforms (CrowdStrike, Defender, SentinelOne, Cortex XSIAM, Carbon Black).
• Understanding of SANS 20 Critical Security Controls and OWASP Top 10.
• Knowledge of network protocols, operating systems, and security technologies.
• Proficiency in incident detection and response tools.
• Familiarity with malware analysis and reverse engineering.
• Proficiency in scripting languages (Python, PowerShell).
• Ideal candidate will have 5+ years of security related experience in SOC/IR/Forensic Investigation.
• Analytical mindset & learning aptitude.
• Willingness to work in a 24/7 operations center (shift work).
• Strong problem-solving and communication skills.

Responsabilidades

• Lead the response to high-severity incidents, coordinating with other teams as necessary.
• Gather and preserve evidence, perform data collection, conduct structured forensic analysis and present findings to stakeholders.
• Work with IT and security teams to address security incidents.
• Conduct investigations to determine root cause.
• Analyze packet captures with Wireshark and TCPdump.
• Perform endpoint analysis, live response, memory analysis.
• Proactively search for threats and vulnerabilities.
• Stay updated on security trends and technologies.
• Analyze threat intelligence to identify risks.
• Formulate response and recovery steps for incidents.
• Review and improve incident response processes and playbooks.
• Document incidents, actions, and lessons learned.
• Prepare detailed incident reports and executive summaries.
• Participate/lead incident response calls.
• Participate in post-incident reviews.
• Provide guidance to lower-level incident responders.

Conhecimentos

Incident response

Forensic analysis

Analytical mindset

Willingness to work 24/7

Verbal & written communication

Learning aptitude

Mentorship

Threat detection

Formação académica

Bachelor’s Degree in IT

Ferramentas

Splunk

Microsoft Sentinel

LogScale

Google Chronicle

IBM QRadar

CrowdStrike

Microsoft Defender

SentinelOne

Cortex XSIAM

Carbon Black

Wireshark

TCPdump

PowerShell

Python

Descrição da oferta de emprego

EY GDS Spain in Málaga is seeking a seasoned Security Operations specialist to join our 24/7 incident response team. You will lead high-severity incident handling, perform forensic analyses, and coordinate with IT and security peers to safeguard client environments.

You’ll work with SIEM and EDR tools, develop and refine playbooks, and mentor junior responders while reporting to stakeholders. This hybrid role offers continuous learning, flexible work-life integration, and opportunities to impact