SOC Analyst

Talantir; Barcelona; On-site; EUR 45,000 - 65,000; Full time

Job summary

SQUAD Group in Barcelona is seeking a SOC Analyst to join a top-tier Incident Response team, protecting the digital assets of a high-traffic platform.

You will monitor alerts across SIEM, EDR, DLP and NIDS, analyze incidents, and implement playbooks. The role emphasizes detection tuning, documentation, and collaboration with cross-functional teams.

Based in Barcelona, this position offers growth through certifications and hands-on security operations experience.

Qualifications

• 3–5 years of experience in SOC operations or cybersecurity monitoring.
• Proficiency in SIEM and EDR tools (Elastic & CrowdStrike preferred).
• Understanding of alert triage, escalation workflows, and incident documentation.
• Familiarity with cloud and network security concepts (AWS preferred).

Responsibilities

• Responsible for continuous monitoring of alerts, triaging potential incidents, and executing playbooks.
• Conduct correlation and enrichment activities to validate detections.
• Escalate verified incidents and support remediation activities.
• Collaborate on fine-tuning detection rules and minimizing false positives.
• Maintain meticulous incident documentation and ensure shift handover quality.
• Support forensic investigations and contribute to SOC process improvements.

Skills

SIEM

EDR tools

Cloud security

Incident response

Alert triage

Tools

Elastic

CrowdStrike

AWS

Job description

SOC Analyst - Barcelona

Since 2011, SQUAD Group has been a key player in the cybersecurity landscape. We partner with leading organizations to protect their information systems through a comprehensive 360° offering of consulting, integration, expertise, and managed services.

Our mission: Securing Together!

We believe in a collaborative approach to cybersecurity, where experts and clients work hand-in-hand to anticipate threats and protect critical infrastructure.

As part of our growing team, we're seeking a SOC Analyst. Based in Barcelona, this role will put you at the core of a top-tier Incident Response team, defending the digital assets of a company that connects hundreds of millions of people every month.

Your Role

You are the operational backbone of the SOC, ensuring that alerts are analyzed, incidents are managed, and responses are executed efficiently. You’ll work across a variety of technologies, including SIEM, EDR, DLP, and NIDS systems. You’ll contribute to both detection tuning and daily operational excellence.

Your Responsibilities

• Responsible for continuous monitoring of alerts, triaging potential incidents, and executing playbooks.
• Conduct correlation and enrichment activities to validate detections.
• Escalate verified incidents and support remediation activities.
• Collaborate on fine-tuning detection rules and minimizing false positives.
• Maintain meticulous incident documentation and ensure shift handover quality.
• Support forensic investigations and contribute to SOC process improvements.

What You Bring

• 3–5 years of experience in SOC operations or cybersecurity monitoring.
• Proficiency in SIEM and EDR tools (Elastic & CrowdStrike preferred).
• Understanding of alert triage, escalation workflows, and incident documentation.
• Familiarity with cloud and network security concepts (AWS preferred).

Preferred Certifications: BTL1–2, GIAC GSEC / GCIA, Elastic Security Analyst

Why Join Squad?

Personalized Growth: We help you build a training and certification plan aligned with your professional goals through our SquadeXpérience.
Expertise Development: Participate in internal events like our MixYourTalent webinars and monthly CTF sessions.
Visibility: Attend major industry conferences and contribute to our #TheExpert technical blog.
Culture: Enjoy a dynamic and close-knit environment with after-work events and team gatherings that foster great camaraderie.