Senior SOC Engineer - Detection & Automation Lead

Syntegon Technology GmbH; Barcelona; On-site; EUR 90,000 - 130,000; Full time

Job summary

Syntegon Telstar S.R.U, part of the Syntegon Group, is seeking a hands-on Senior SOC Engineer for its Terrassa (Barcelona) offices. You will own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, developing detections, workflows, and a resilient security data infrastructure.

You will collaborate with SOC leadership and analysts, escalating complex incidents and driving automation and process improvements to empower analysts to respond faster and more effectively.

Qualifications

• 5–8+ years in cybersecurity with 3+ years in a SOC engineering, detection engineering, or senior analyst role.
• Deep hands-on expertise with SIEM platforms including query authoring and detection rule development.
• Proven experience building SOAR playbooks and automating security workflows.
• Strong knowledge of attacker TTPs and the MITRE ATT&CK framework, with the ability to translate them into detection logic.

Responsibilities

• Design, develop, and maintain detections across SIEM, EDR/XDR, and NDR platforms, aligned to MITRE ATT&CK TTPs.
• Build and optimise SOAR playbooks and automated response workflows.
• Own onboarding of new log sources and manage data ingestion pipelines.
• Act as Tier 3 technical escalation for complex investigations and incidents.
• Maintain health and reliability of core SOC platforms and evaluate new tooling.
• Mentor Tier 1–2 analysts on detection logic and tooling.
• Ensure compliance and audit-ready documentation across platforms.

Skills

SIEM

SOAR

EDR/XDR

MITRE ATT&CK

Scripting

Python

PowerShell

KQL

log onboarding

automation

Tools

SOAR platforms

EDR/XDR tools

NDR tools

Job description

Syntegon Telstar S.R.U, part of the Syntegon Group, is seeking a hands-on Senior SOC Engineer for its Terrassa (Barcelona) offices. You will own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, developing detections, workflows, and a resilient security data infrastructure.

You will collaborate with SOC leadership and analysts, escalating complex incidents and driving automation and process improvements to empower analysts to respond faster and more effectively.