SOC Analyst

BME | Bolsas y Mercados Españoles; Madrid; Híbrido; EUR 70.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work up to 40%

Meal allowance

Medical insurance for employee and fam

Pension fund

Learning platforms access

Parking & shuttle

Descripción de la vacante

The Security Operations Center (SOC) at SIX is hiring a hands-on security professional with incident response, threat hunting, and security monitoring experience. You will develop detections, investigate complex alerts, and drive containment and remediation while improving automation and playbooks to strengthen SIX's security posture.

You will mentor junior analysts, collaborate across teams, and help design proactive threat detection across endpoint, identity, network, cloud, and email

Formación

• 4+ years of SOC experience.
• Hands-on with SIEM, EDR, SOAR.
• Proficiency in scripting and automation.
• Knowledge of MITRE ATT&CK.
• Strong analytical and communication skills.

Responsabilidades

• Develop, tune, and maintain threat detections across endpoint, network, identity, cloud, mail, and M365.
• Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.
• Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
• Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify detection gaps and continuously enhance SOC capabilities and security posture.
• Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

Conocimientos

SOC operations

Threat hunting

Incident response

Detection engineering

SIEM/EDR/SOAR

Scripting automation

MITRE ATT&CK

Mentoring

Herramientas

Sentinel

Elastic

Defender for Endpoint

Cortex XSOAR

Python

GitLab

Azure DevOps

CI/CD

Descripción del empleo

The Security Operations Center (SOC) is a critical Line of Defense 1 function at SIX, responsible for detecting, investigating, and responding to cyber threats across endpoint, identity, network, cloud, and email environments. We are looking for a hands-on security professional with experience in incident response, threat hunting, and security monitoring. In this role, you will investigate complex alerts, develop and tune detection use cases, support containment and remediation efforts, improve automation and playbooks, and proactively identify threats to strengthen SIX's overall security posture.

What You Will Do

• Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, mail, and M365 environments.
• Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation activities.
• Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
• Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
• Identify detection gaps and continuously enhance SOC capabilities and security posture.
• Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.

What You Bring

• 4+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.
• Hands-on experience with SIEM, EDR, and SOAR platforms (preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR).
• Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources.
• Experience with scripting, automation, APIs, and tools such as Python, GitLab, Azure DevOps, and CI/CD practices.
• Knowledge of security query languages and frameworks, including MITRE ATT&CK.
• Strong analytical, communication, collaboration, and mentoring skills.

What We Offer

• Hybrid model up to 40% working from home
• 37,5 hours/week with flexible schedule and 29+2 holidays
• Daily meal allowance
• Additional Medical Insurance for employee and family
• Pension fund
• Access to technical and language learning platforms
• Free parking spots, charger spots and shuttle bus (only for Las Rozas - Madrid location)