Senior SOC Engineer - 100% Remote

SQUAD - Cabinet de conseils et d’expertises; Barcelona; On-site; EUR 55,000 - 85,000; Full time

Job summary

SQUAD Group in Spain is seeking a Senior SOC Analyst to join our top-tier Incident Response team, protecting critical infrastructures and user data across high-profile clients. As a hands-on defender, you will hunt threats, tune detections, and respond to incidents using SIEM, EDR, and SOAR, while mentoring junior analysts and driving continuous improvement within a collaborative, security-first culture.

Join us to grow your expertise through certifications and real-world projects in a dynamic

Qualifications

• 5–7 years of experience in SOC operations, detection engineering, or incident response.
• Strong technical knowledge of SIEM, EDR, and SOAR platforms.
• Scripting or automation experience (Python, PowerShell) for enrichment or response tasks.
• Understanding of MITRE ATT&CK, threat intelligence, and adversary emulation.

Responsibilities

• Responsible for advanced incident investigations, threat hunts, and forensic analysis.
• Develop and refine custom detection rules, correlation logic, and alert tuning.
• Integrate and enhance data sources to improve signal fidelity.
• Design and maintain automated playbooks using SOAR capabilities.
• Collaborate with the Technical Lead on continuous detection improvement.
• Mentor L1/L2 analysts, sharing advanced investigative techniques.

Skills

SIEM

EDR

SOAR

Python

PowerShell

Threat intelligence

Tools

SIEM platforms

EDR tools

SOAR platforms

Python scripting

PowerShell scripting

Job description

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a Senior SOC Analyst. Based in Spain, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month.

Your Role

You are a hands-on defender and investigator. A Senior Analyst focused on threat hunting, detection engineering, and incident response. Working across the SOC’s advanced security stack (SIEM, EDR, DLP, and NIDS you’ll build, tune, and operate detection mechanisms that stop threats before they elevate.

Your Responsibilities

• Responsible for advanced incident investigations, threat hunts, and forensic analysis.
• Develop and refine custom detection rules, correlation logic, and alert tuning.
• Integrate and enhance data sources to improve signal fidelity.
• Design and maintain automated playbooks using SOAR capabilities.
• Collaborate with the Technical Lead on continuous detection improvement.
• Mentor L1/L2 analysts, sharing advanced investigative techniques.

What You Bring

• 5–7 years of experience in SOC operations, detection engineering, or incident response.
• Strong technical knowledge of SIEM, EDR, and SOAR platforms.
• Scripting or automation experience (Python, PowerShell) for enrichment or response tasks.
• Understanding of MITRE ATT&CK, threat intelligence, and adversary emulation.

Preferred Certifications:

BTL2, GIAC GCIA / GCIH, CrowdStrike Certified Falcon Administrator, Elastic Security Analyst

Why Join Squad?

• Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
• Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
• Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
• Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.