Analista de Ciberseguridad, N1

This is a fully remote position, open to applicants in Spain.

📋 Description

• Monitoring and triaging Level 1 security alerts from various tools and sources.

• Conducting initial analysis of events and logs to identify potential threats or security incidents.

• Investigating and classifying alerts, assessing their severity, impact, and possible false positives.

• Basic analysis of Indicators of Compromise (IOC) such as IP addresses, domains, URLs, or hashes.

• Utilizing SIEM and EDR/XDR tools for alert investigation.

• Documenting and tracking incidents through ticketing tools.

• Implementing incident response procedures and playbooks.

• Escalating incidents that require advanced investigation to Level 2/Level 3 teams.

• Collaborating with international SOC teams.

• Participating in the continuous improvement of detection and response procedures.

⛳️ Requirements

• Degree in Cybersecurity, Computer Science, Telecommunications, or related fields.

• Basic knowledge of defensive cybersecurity and incident response.

• Understanding of networks and protocols: TCP/IP, DNS, HTTP/HTTPS, etc.

• Ability to interpret and analyze security events, logs, and alerts.

• Basic knowledge of SIEM tools.

• Familiarity with EDR/XDR, firewalls, IDS/IPS, malware, phishing, vulnerabilities, and IOC.

• Basic knowledge of the MITRE ATT&CK framework.

• Proficiency in English is essential.

• Strong analytical skills, attention to detail, and a proactive attitude.

• Availability to work regularly during night shifts and/or weekends.

• Previous experience, even at a junior level, in a SOC, CERT/CSIRT, or Blue Team will be valued.

• Experience with Microsoft Sentinel, Splunk, Elastic, IBM QRadar, CrowdStrike, Microsoft Defender, or similar will be considered a plus.

• Knowledge of Windows and Linux systems will be advantageous.

• Basic scripting knowledge with Python, Bash, or PowerShell will be appreciated.

• Experience or knowledge in network traffic analysis using Wireshark will be valued.

• Relevant certifications or specialized training in Blue Team, SOC, SIEM, or incident response will be considered an asset.

🏝️ Benefits

• Training, growth opportunities, and mobility.

• Flexibility in the workplace and organizational autonomy.

• Opportunities for team bonding and sharing experiences.

• Hybrid and flexible work model.

• Professional development and training plans.

• Company-funded health insurance.

• Flexible remuneration plan including meal vouchers, public transport, childcare, and training.

• Reimbursement of mobile phone bills.