Senior SOC Engineer – Detection & Automation Lead

Telstar; Terrassa; Remote; EUR 70,000 - 90,000; Full time

Job summary

Syntegon Telstar S.R.U in Terrassa (Barcelona area) is seeking a hands-on Senior SOC Engineer to help design, build, and improve our Security Operations Center. You will own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, developing high-fidelity detections and reliable data infrastructure.

Working with the SOC Leader and analysts, you will act as a technical escalation point for complex incidents, driving automation, and mentoring Tier 1-2 staff on detection logic and

Qualifications

• 5–8+ years in cybersecurity with 3+ years in a SOC engineering or senior analyst role.
• Deep hands-on experience with SIEM query authoring and detection rule development.
• Proven experience building SOAR playbooks and automating security workflows.
• Strong knowledge of MITRE ATT&CK and translating tactics into detections.
• Experience with log onboarding, data normalisation, and pipeline management at scale.
• Understanding of EDR/XDR, NDR, cloud telemetry, and identity signals.
• Scripting or development skills (Python, PowerShell, KQL).
• Clear written and verbal communication for varied audiences.

Responsibilities

• Design, develop, and maintain detection content across SIEM/EDR/XDR/NDR platforms, aligned to MITRE ATT&CK TTPs, owning the full use case lifecycle from requirements through to tuning and deprecation.
• Build and optimise SOAR playbooks and automated response workflows, identifying and implementing automation opportunities across triage, enrichment, containment, and evidence collection.
• Own the onboarding of new log sources and manage data ingestion pipelines for cost-effectiveness, completeness, and reliability.
• Act as Tier 3 technical escalation for complex investigations and high-severity incidents, supporting forensic analysis, malware triage, and root cause determination.
• Maintain the health, performance, and reliability of core SOC platforms and evaluate new tooling aligned to the SOC's maturity roadmap.
• Partner with IT, Cloud, Network, and Identity teams to improve log coverage and response integration, and mentor Tier 1-2 analysts on detection logic and tooling.
• Ensure detection and engineering controls support relevant compliance requirements and maintain audit-ready documentation across platforms and pipelines.

Skills

SIEM

SOAR

EDR/XDR

log pipelines

MITRE ATT&CK

Python

PowerShell

KQL

communication

Job description

Syntegon Telstar S.R.U in Terrassa (Barcelona area) is seeking a hands-on Senior SOC Engineer to help design, build, and improve our Security Operations Center. You will own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines, developing high-fidelity detections and reliable data infrastructure.

Working with the SOC Leader and analysts, you will act as a technical escalation point for complex incidents, driving automation, and mentoring Tier 1-2 staff on detection logic and