Senior Security Engineer - SOC - L2

JR Spain; Gerona; A distancia; EUR 40.000 - 60.000; Jornada completa

Descripción de la vacante

A dynamic cybersecurity firm is seeking a Senior Security Engineer in Girona to enhance clients' security through proactive threat monitoring and incident handling. You will lead SOC initiatives, train junior members, and ensure top-notch security service levels. The ideal candidate will have a strong engineering background, extensive experience in cybersecurity, and a collaborative approach to improving security processes.

Servicios

Competitive salary

Medical insurance

Flexible working hours

Birthday day off

Formación

• Degree in Computer/Telecommunications Engineering or related.
• More than 3 years in information security, ideally in a SOC environment.
• Strong technical knowledge of security tools and scripting.

Responsabilidades

• Lead incidents and investigations based on security alerts.
• Create and improve security monitoring alerts.
• Conduct forensics/malware analysis for threat mitigation.

Conocimientos

Incident handling

Cybersecurity

Network fundamentals

Scripting

Fluent English

Educación

Computer/Telecommunications Engineering degree

Herramientas

Firewalls

IDS/IPS

SIEM

Descripción del empleo

Social network you want to login/join with:

Senior Security Engineer - SOC - L2, girona

col-narrow-left

Client:

Ackcent Cybersecurity

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

84354349546864640032460

Job Views:

2

Posted:

23.07.2025

Expiry Date:

06.09.2025

col-wide

Job Description:

Professionals at Ackcent Cybersecurity have a common goal: to improve the security of our customers, protect their assets from cyber threats and to provide a high-quality service through communication and care for our customers. In this position you will be part of our SOC Team in charge of security threat monitoring and incident handling, you will be helping to secure and defend our clients’ assets.

We are looking for professionals with experience in cybersecurity and with a wide and deep understanding about Networks, Security Architecture and Security Monitoring Tools.

As a key member of the Ackcent team, you will be in charge leading the handling of security threats and incidents, improving and maintaining tools and procedures and conducting forensics and malware analysis for further mitigation and threat containment. As a senior position you will be able to train and support other junior team members and will be involved alongside other Ackcent departments in different initiatives and decisions regarding internal and external Security Services.

Key Responsibilities

· Analysis and verification of security threat monitoring alerts to produce incident identification, classification and prioritization.

· Create, improve and maintain security monitoring alerts based on correlation of different sources of data.

· Operate and maintain various IDS/IPS working close with security/network architects to take security monitoring and defenses to the next level.

· Lead the response to security incidents and investigations working close with customers and IT providers, following SLA requirements.

· Conduct forensics/malware analysis to extract indicators of compromise for further mitigation and containment, evaluating incident scope and impact.

· Report to the SOC Manager and the customer involved CISO/CIO.

· Advice and train junior team members.

· Proactive monitoring on cyber threat landscape by performing research and study on latest security threats and vulnerabilities to ensure operational tools and processes are up to date.

· Ensuring contractual obligations are met and SLAs are met or exceeded.

· Manage priorities, deadlines and deliveries.

· Manage and create improvements and procedures regarding SOC Tools and Operations.

Required Skills & Experience

· Computer/Telecommunications Engineering degree or a related discipline.

· More than 3 years of relevant experience in the field of information security.

· Experience working in a Security Operations Centre (SOC) environment.

· Strong technical understanding of network fundamentals and common Internet protocols.

· Knowledge of system administration and security architecture.

· Knowledge of the main security monitoring tools (FW, IDS/IPS, HIDS, WAF, SIEM).

· Experience or proven knowledge of at least one IDS technology.

· Scripting in Bash, Python or PowerShell.

· Fluent in English (written and spoken).

· Self-motivated with the ability to work independently and as a team member in a challenging environment.

Nice to have

· Proficient in understanding Operating Systems and their architecture: Windows, Unix/Linux, and OSX Operating Systems.

· Windows server administration knowledge.

· Good understanding of Cyber security landscape: Cyber kill chain, TTP, Threat Intelligence ad malware distribution networks.

· Good understanding of information security concepts: defense in depth, BYOD management, data loss protection, risk assessment and security metrics.

· Three or more years working in a Security Operations Center (SOC) environment.

· Strong analytical and problem-solving skills.

· Strong communication, presentation, and leadership skills along with the ability to work in a highly collaborative environment.

· Exhibits initiative, follow-up and follow through with commitments.

· Manages multiple priorities in a high-pressure environment.

· Experience working with AWS or Azure infrastructure.

· Previous experience with malware reverse engineering.

· Related Certification (GCIH, GCFA, GCFE, GREM, CISSP) is a plus.

What we offer

· Competitive salary

· Medical insurance

· Remote work

· Birthday day off

· Flexible working hours

· A dynamic work environment where innovation and collaboration are at the core