Senior SOC Analyst - Threat Hunting & IR (Remote 40%)

SIX Group Services Ltd.; Las Rozas de Madrid; Remote; EUR 42,000 - 66,000; Full time

Benefits offered by this job

Flexible work models

Personal development

Agile working methods

Job summary

The SIX Group Services Ltd. SOC Analyst role in Madrid offers a home‑based work option up to 40% and a dynamic team focused on detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments.

You will develop detections, lead threat analyses, and contribute to automation playbooks while mentoring junior analysts and strengthening SIX's security posture.

Qualifications

• 4+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR, and SOAR platforms (Sentinel, Elastic, Defender for Endpoint, Cortex XSOAR).
• Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources.
• Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices.
• Knowledge of security query languages and frameworks, including MITRE ATT&CK.
• Strong analytical, communication, collaboration, and mentoring skills.

Responsibilities

• Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments.
• Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.
• Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
• Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify detection gaps and continuously enhance SOC capabilities and security posture.
• Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

Skills

SOC operations

Threat hunting

Incident response

Detection engineering

Automation scripting

MITRE ATT&CK

Tools

Sentinel

Elastic

Defender for Endpoint

Cortex XSOAR

Job description

The SIX Group Services Ltd. SOC Analyst role in Madrid offers a home‑based work option up to 40% and a dynamic team focused on detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments.

You will develop detections, lead threat analyses, and contribute to automation playbooks while mentoring junior analysts and strengthening SIX's security posture.