Senior SOC Technical Lead & Incident Response Architect

SQUAD - Cabinet de conseils et d’expertises; Barcelona; Presencial; EUR 90.000 - 130.000; Jornada completa

Descripción de la vacante

SQUAD - Cabinet de conseils et d’expertises in Barcelona is seeking a SOC Technical Engineer to join our top-tier Incident Response team. You’ll lead the design, optimization, and integration of the SOC’s security stack, including Elastic SIEM, EDR, DLP, and NIDS, and coordinate daily operations while guiding analysts across tiers.

This role requires 10+ years in SOC or cybersecurity with leadership responsibilities, deep expertise in SIEM/EDR/SOAR (Elastic & CrowdStrike), strong threat

Formación

• 10+ years of SOC or cybersecurity experience with leadership responsibilities.
• Deep expertise across SIEM, EDR, and SOAR technologies (Elastic & CrowdStrike).
• Strong background in threat detection, automation, and incident response architecture.
• Excellent communication and stakeholder management skills.

Responsabilidades

• Lead environment assessments, including Elastic SIEM audits and detection rule gap analysis.
• Define escalation workflows, playbooks, and operational documentation.
• Oversee SOAR automation and orchestration, driving efficiency across response processes.
• Coordinate and mentor SOC members (L1–L3), ensuring high-quality investigations and continuous improvement.
• Act as the senior escalation point for complex security incidents and client communications.
• Align SOC strategy with the client’s objectives, maintaining performance metrics and operational KPIs.

Conocimientos

Leadership

Incident response

Threat detection

Automation

Communication

Stakeholder management

Herramientas

Elastic SIEM

CrowdStrike

SOAR platforms

NIDS

Descripción del empleo

SQUAD - Cabinet de conseils et d’expertises in Barcelona is seeking a SOC Technical Engineer to join our top-tier Incident Response team. You’ll lead the design, optimization, and integration of the SOC’s security stack, including Elastic SIEM, EDR, DLP, and NIDS, and coordinate daily operations while guiding analysts across tiers.

This role requires 10+ years in SOC or cybersecurity with leadership responsibilities, deep expertise in SIEM/EDR/SOAR (Elastic & CrowdStrike), strong threat