Senior SOC Engineer: Detection & Automation Lead

Syntegon Telstar; Barcelona; On-site; EUR 60,000 - 90,000; Full time

Job summary

Syntegon Telstar in Terrassa (Barcelona) seeks a hands-on Senior SOC Engineer to own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, delivering high‑fidelity detections and efficient workflows.

You will partner with SOC leaders to automate incidents, improve processes, and empower analysts with robust engineering solutions. 5–8+ years in cybersecurity with SOC engineering experience are expected.

Qualifications

• 5–8+ years in cybersecurity with 3+ years in a SOC engineering, detection engineering, or senior analyst role.
• Deep hands-on expertise with SIEM platforms including query authoring and detection rule development.
• Proven experience building SOAR playbooks and automating security workflows.
• Strong knowledge of attacker TTPs and the MITRE ATT&CK framework, with the ability to translate them into detection logic.
• Experience with log onboarding, data normalisation, and pipeline management at scale.
• Solid understanding of EDR/XDR, NDR, cloud telemetry, and identity signals.
• Scripting or development skills (e.g., Python, PowerShell, KQL) for automation and tooling integration.
• Clear written and verbal communication with the ability to document technical content for varied audiences.

Responsibilities

• Design, develop, and maintain detection content across SIEM, EDR/XDR, and NDR platforms, aligned to MITRE ATT&CK TTPs, owning the full use case lifecycle from requirements through to tuning and deprecation.
• Build and optimise SOAR playbooks and automated response workflows, identifying and implementing automation opportunities across triage, enrichment, containment, and evidence collection.
• Own the onboarding of new log sources and manage data ingestion pipelines for cost‑effectiveness, completeness, and reliability.
• Act as Tier 3 technical escalation for complex investigations and high‑severity incidents, supporting forensic analysis, malware triage, and root cause determination.
• Maintain the health, performance, and reliability of core SOC platforms and evaluate new tooling aligned to the SOC's maturity roadmap.
• Partner with IT, Cloud, Network, and Identity teams to improve log coverage and response integration, and mentor Tier 1–2 analysts on detection logic and tooling.
• Ensure detection and engineering controls support relevant compliance requirements and maintain audit‑ready documentation across platforms and pipelines.

Skills

SIEM expertise

SOAR automation

MITRE ATT&CK knowledge

Log onboarding

EDR/XDR/NDR knowledge

Scripting/automation

Documentation & communication

Collaboration

Tools

PowerShell

Python

KQL

Job description

Syntegon Telstar in Terrassa (Barcelona) seeks a hands-on Senior SOC Engineer to own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, delivering high‑fidelity detections and efficient workflows.

You will partner with SOC leaders to automate incidents, improve processes, and empower analysts with robust engineering solutions. 5–8+ years in cybersecurity with SOC engineering experience are expected.