SOC L2 Analyst

This is a fully remote position, open to applicants in Spain.

📋 Description

• Receive and validate L1 escalations.

• Conduct in-depth investigations of potential incidents to determine scope, impact, and affected assets.

• Coordinate and implement additional containment measures beyond those established by L1.

• Draft and update incident reports throughout their lifecycle.

• Communicate findings to the client as necessary.

• Escalate complex or high-severity incidents to L3.

• Provide constructive feedback and quality control regarding the triage developed by L1.

• Maintain direct communication with the client to report findings when the situation requires it.

• Participate in the on-call schedule as the last technical escalation level.

• Lead the deep investigation of alerts escalated by L1, determine the impact of incidents, and coordinate advanced containment measures.

⛳️ Requirements

• Degree in Computer Engineering, Telecommunications, or a higher qualification in computer science or cybersecurity, or demonstrable equivalent experience.

• Minimum of 3 years of experience in a managed SOC environment.

• Strong knowledge of log analysis and in-depth forensic analysis.

• Practical experience with SIEM (Devo and/or Microsoft Sentinel, KQL) and EDR.

• Incident management experience using Jira or ServiceDesk.

• Proficient in drafting incident reports.

• Knowledge of MITRE ATT&CK.

• English: B2 level.

• Availability for rotating on-call duties.

• Relevant certifications will be viewed positively.

• Experience in cloud environments will be considered advantageous.

🏝️ Benefits

• Flexible Compensation Plan: meal card, transportation card, medical insurance, and training.

• Fixed salary + on-call pay.

• Permanent full-time contract.

• 100% remote work.