SOC Triage Specialist — Fast Alerts & Clear Escalations

happyrobot.ai; Madrid; Presencial; EUR 30.000 - 48.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Healthcare

Dental coverage

Vision coverage

Equity

Descripción de la vacante

HappyRobot is seeking a SOC Analyst to own alert triage during coverage hours, prioritizing high-severity alerts and providing clear, context-rich escalations in English. You will analyze logs from cloud, identity, and endpoints, using MITRE ATT&CK as a reference, and work with runbooks to improve detection and response.

The role emphasizes ongoing tuning, weekly feedback with the SOC Engineer, and readiness for audit commitments. A rotation schedule is expected.

Formación

• 2–3 years as a SOC analyst or similar blue team role.
• Hands-on alert triage with a SIEM and an EDR.
• Log analysis across cloud, identity, and endpoints.
• Familiarity with MITRE ATT&CK and common attack patterns.
• Clear incident notes in English (B2+).
• Willingness to work a coverage-hours rotation.

Responsabilidades

• Alert triage: manage queue during coverage hours, fast disposition.
• Analyze logs across cloud, identity and endpoints to build context.
• Escalate incidents with complete, actionable context and recommended steps.
• Follow and improve runbooks; flag gaps and propose fixes.
• Run weekly tuning feedback with SOC Engineer to reduce false positives.
• Prepare audit-ready evidence and documentation for SOC 2/ISO.

Conocimientos

SOC analyst experience

Alert triage

Log analysis

MITRE ATT&CK knowledge

English incident notes

Coverage-hours rotation

Herramientas

SIEM

EDR

Descripción del empleo

HappyRobot is seeking a SOC Analyst to own alert triage during coverage hours, prioritizing high-severity alerts and providing clear, context-rich escalations in English. You will analyze logs from cloud, identity, and endpoints, using MITRE ATT&CK as a reference, and work with runbooks to improve detection and response.

The role emphasizes ongoing tuning, weekly feedback with the SOC Engineer, and readiness for audit commitments. A rotation schedule is expected.