Tier 2 SOC Analyst — Incident Response & Threat Hunting

Kudelski Security; As Catro Rúas; Híbrido; EUR 55.000 - 65.000; Jornada completa

Descripción de la vacante

Kudelski Security is seeking a Tier 2 SOC Analyst to act as a subject matter expert in our technology stack within a multi-client SOC environment. You will optimize security tools and detection workflows, mentor junior analysts, and drive continuous improvement across incidents escalated from Tier 1.

You will conduct advanced threat investigations, refine incident templates, and contribute to SOP updates, while ensuring timely responses to tickets and adherence to security best practices.

Formación

• Bachelor's degree in Cybersecurity, IT, CS, or equivalent.
• Minimum 4 years hands-on cybersecurity operations, incident response, or threat analysis.

Responsabilidades

• Use AI to support continuous improvement work: refining incident templates, proposing workflow enhancements, and contributing to SOP updates.
• Propose enhancement on tools and workflow.
• Respond in a timely manner (within documented SLA) to support tickets.
• Document actions in tickets to communicate information internally and to customers.
• Adhere to policies, procedures, and security best practices.
• Take responsibility for customer satisfaction and overall success of managed services.
• Be available to accept incoming client calls.
• Mentor fellow Security Engineers and Security Analysts.
• Optimize SIEM rules and detection logic to reduce false positives and improve detection accuracy.
• Support rules factory program in improving the global set of detection.
• Validate Go-to-Active and Go-to-Prod gates of our new clients for a smooth transition to operation.
• Continuously improve incident templates for clients and automation to support operations.
• Support rollout of new rules for our clients.
• Qualify, analyze, and provide recommendations for new standard data source requests.
• Support Product teams to build new services to fit Operations capabilities (needs, scalability, efficiency).
• Manage escalated cases from T1 Analysts.
• Analyze and respond to security events from SIEM, EDR, FWs, IDS, IPS, AV and other security data sources.
• Use approved AI tools to summarize complex incident timelines and consolidate evidence across sources.
• Use AI-assisted analysis to identify patterns and likely attack paths, supporting deeper investigations.
• Deliver high quality Incident Handling and investigation.
• Conduct threat hunting activities using advanced analytics and threat intelligence.
• Provide 24/7 on-call support for critical security incidents outside business hours.

Conocimientos

SIEM platforms

EDR/XDR

Cloud security

Windows/Linux

Python scripting

MITRE ATT&CK

Threat intelligence

Multinational environment

Spanish language

Educación

Bachelor's degree in Cybersecurity/IT/CS

Herramientas

CrowdStrike

SentinelOne

Splunk

Descripción del empleo

Kudelski Security is seeking a Tier 2 SOC Analyst to act as a subject matter expert in our technology stack within a multi-client SOC environment. You will optimize security tools and detection workflows, mentor junior analysts, and drive continuous improvement across incidents escalated from Tier 1.

You will conduct advanced threat investigations, refine incident templates, and contribute to SOP updates, while ensuring timely responses to tickets and adherence to security best practices.