Senior SOC Detection & Response Engineer - Remote Eligible

SIX; Las Rozas de Madrid; Hybride; EUR 50 000 - 80 000; Plein temps

Avantages offerts par ce poste

Flexible Work Models

Personal Development

Agile Working Methods

Résumé du poste

SIX Group in Madrid seeks an experienced SOC professional to detect, investigate, and respond to cyber threats across endpoints, identities, and cloud. You will develop detections, lead incidents, and improve playbooks in a hands-on role.

4+ years in SOC with SIEM/EDR/SOAR, Python scripting, and MITRE ATT&CK knowledge. Hybrid work up to 40% from home and a collaborative team environment.

Qualifications

• 4+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR).
• Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices.
• Knowledge of security query languages and frameworks, including MITRE ATT&CK.
• Strong analytical, communication, collaboration, and mentoring skills.

Responsabilités

• Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments.
• Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.
• Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
• Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify detection gaps and continuously enhance SOC capabilities and security posture.
• Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

Connaissances

SOC operations

Threat hunting

SIEM

EDR

SOAR

Python

APIs

CI/CD

MITRE ATT&CK

Automation

GitLab

Azure DevOps

Outils

Sentinel

Elastic

Defender for Endpoint

Cortex XSOAR

GitLab

Azure DevOps

Description du poste

SIX Group in Madrid seeks an experienced SOC professional to detect, investigate, and respond to cyber threats across endpoints, identities, and cloud. You will develop detections, lead incidents, and improve playbooks in a hands-on role.

4+ years in SOC with SIEM/EDR/SOAR, Python scripting, and MITRE ATT&CK knowledge. Hybrid work up to 40% from home and a collaborative team environment.