SOC L1 Analyst – 24/7 Threat Triage & Monitoring

UST; Madrid; Sur place; EUR 28 000 - 40 000; Plein temps

Avantages offerts par ce poste

Health and wellbeing package

1–3 days remote work flexibility

Life and accident insurance

Meal and transport benefits

Training platforms access

Career stability and growth plans

Referral bonuses

Résumé du poste

UST in Madrid seeks a SOC L1 Analyst to join its Security Operations Center. The role involves monitoring security events from SIEM/EDR, performing initial investigations, and escalating as needed. You will work in a 24/7 rotational shift environment and collaborate with L2/L3 for complex incidents.

Candidates should have 1–2 years of SOC experience, strong knowledge of cybersecurity fundamentals, and English/Spanish at C1 level. A Bachelor’s degree is preferred.

Qualifications

• Bachelor’s degree in cybersecurity, CS, IT or related field.
• 1–2 years of professional SOC L1 experience.
• Experience investigating and triaging SOC events.
• English and Spanish at C1 level.

Responsabilités

• Monitor security events from SIEM/EDR, email, firewall, cloud security.
• Perform first-level triage and investigations of security events.
• Validate incidents and classify true/false positives.
• Escalate high-severity or complex incidents to L2/L3.
• Create and update incident tickets with notes and actions.
• Follow SOPs, runbooks, and incident response procedures.
• Conduct IOC lookups using trusted threat intel sources.
• Review events across endpoint, network, identity, and logs.
• Coordinate containment or response per playbooks.
• Ensure incidents are acknowledged and escalated timely.

Connaissances

SIEM

EDR

Incident triage

Log analysis

Threat intel

EN/ES bilingual

Formation

Bachelor’s degree

Outils

Microsoft Sentinel

Splunk

IBM QRadar

Google Chronicle

CrowdStrike Falcon

Defender for Endpoint

Description du poste

UST in Madrid seeks a SOC L1 Analyst to join its Security Operations Center. The role involves monitoring security events from SIEM/EDR, performing initial investigations, and escalating as needed. You will work in a 24/7 rotational shift environment and collaborate with L2/L3 for complex incidents.

Candidates should have 1–2 years of SOC experience, strong knowledge of cybersecurity fundamentals, and English/Spanish at C1 level. A Bachelor’s degree is preferred.