SOC Analyst: Rapid Alert Triage & Clear Escalations

Happyrobot Inc.; Bellprat; Presencial; EUR 36.000 - 60.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare coverage

Dental coverage

Vision coverage

Descripción de la vacante

HappyRobot is seeking a SOC Analyst to own alert triage during coverage hours, prioritizing high-severity alerts and documenting context for engineering action. You will analyze logs across cloud, identity, and endpoints, using MITRE ATT&CK as a reference frame to interpret signals and escalate with complete context.

The role requires 2–3 years in a blue team/detection role, hands-on SIEM/EDR triage experience, and clear English incident notes.

Formación

• 2–3 years as a SOC analyst or in a blue team/detection and response role.
• Hands-on alert triage experience with a SIEM and an EDR — investigation, disposition, and escalation.
• Log analysis across cloud, identity, and endpoint sources.
• Working knowledge of MITRE ATT&CK and common attack patterns.
• Clear written incident notes and escalations in English (B2+).
• Comfortable operating on a coverage-hours rotation.

Responsabilidades

• Own the alert queue during coverage hours and triage alerts quickly and accurately.
• Pivot across cloud, identity, and endpoint logs to build a clear incident timeline.
• Escalate incidents with complete context and actionable next steps for engineering.
• Follow and improve runbooks, flag gaps, and propose fixes.
• Run a weekly tuning feedback loop with the SOC Engineer to reduce false positives.
• Keep evidence ready for audit readiness (SOC 2, ISO 27001).

Conocimientos

SOC analyst

SIEM

EDR

MITRE ATT&CK

English writing

Rotation experience

Herramientas

SIEM

EDR

Descripción del empleo

HappyRobot is seeking a SOC Analyst to own alert triage during coverage hours, prioritizing high-severity alerts and documenting context for engineering action. You will analyze logs across cloud, identity, and endpoints, using MITRE ATT&CK as a reference frame to interpret signals and escalate with complete context.

The role requires 2–3 years in a blue team/detection role, hands-on SIEM/EDR triage experience, and clear English incident notes.