Senior SOC Analyst

SQUAD Conseil et Expertises; Madrid; Presencial; EUR 55.000 - 75.000; Jornada completa

Descripción de la vacante

A leading cybersecurity firm is seeking a Senior SOC Analyst in Madrid. This role involves defending digital assets through advanced incident investigations and threat hunting. Candidates should have 5–7 years of experience in SOC operations, strong knowledge of SIEM and EDR platforms, and scripting skills in Python or PowerShell. Join a dynamic team committed to cybersecurity excellence and professional growth.

Servicios

Personalized training and certification plans

Participation in industry conferences

Dynamic team environment and events

Formación

• 5–7 years of experience in SOC operations, detection engineering, or incident response.
• Strong technical knowledge of SIEM, EDR, and SOAR platforms.
• Scripting or automation experience for enrichment or response tasks.

Responsabilidades

• Responsible for advanced incident investigations and threat hunts.
• Develop and refine custom detection rules and alert tuning.
• Integrate and enhance data sources to improve signal fidelity.

Conocimientos

Threat hunting

Detection engineering

Incident response

Scripting (Python, PowerShell)

Understanding of MITRE ATT&CK

Educación

Relevant certifications (BTL2, GIAC GCIA/GCIH)

Herramientas

SIEM (Elastic)

EDR (CrowdStrike)

SOAR platforms

Descripción del empleo

Senior SOC Analyst - Barcelona

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission : Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a

Senior SOC Analyst

• Based in Barcelona, this role will put you at the core of a top‑tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month.

Your Role

You are a hands‑on defender and investigator. A Senior Analyst focused on threat hunting, detection engineering, and incident response. Working across the SOC’s advanced security stack (SIEM, EDR, DLP, and NIDS) you’ll build, tune, and operate detection mechanisms that stop threats before they escal​ate.

Your Responsibilities

Responsible for advanced incident investigations, threat hunts, and forensic analysis.

Develop and refine custom detection rules, correlation logic, and alert tuning.

Integrate and enhance data sources to improve signal fidelity.

Design and maintain automated playbooks using SOAR capabilities.

Collaborate with the Technical Lead on continuous detection improvement.

Mentor L1 / L2 analysts, sharing advanced investigative techniques.

What You Bring

5–7 years of experience in SOC operations, detection engineering, or incident response.

Strong technical knowledge of SIEM, EDR, and SOAR platforms (Elastic, CrowdStrike preferred).

Scripting or automation experience (Python, PowerShell) for enrichment or response tasks.

Understanding of MITRE ATT&CK, threat intelligence, and adversary emulation.

Preferred Certifications :

BTL2, GIAC GCIA / GCIH, CrowdStrike Certified Falcon Administrator, Elastic Security Analyst

Why Join Squad?

Personalized Growth :

We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.

Expertise Development :

Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.

Visibility :

Attend major industry conferences and contribute to our #TheExpert technical blog.

Culture :

Enjoy a dynamic and close‑knit environment with after‑work events and team gatherings that foster great camaraderie.