




Can you imagine being part of transforming major national and international organizations? At Deloitte, we are committed to making an impact on society, our clients, and you. We are seeking senior profiles to join Deloitte's CyberSOC as Level 2 and Level 3, specifically within the MDR team in Operations. Madrid, Seville, Barcelona, Valencia, Bilbao. What will your day-to-day look like? You will investigate and manage security alerts generated by various tools, including all response actions previously approved with the client. You will investigate security alerts raised by any other internal or external stakeholders. You will support and adapt the creation of MDR Level 1 and Level 2 playbooks tailored to client needs. You will monitor tickets and adjust false positive rates based on information provided by the client. Including alerts from tools such as NDR and EDR. You will create/modify security dashboards in the client's SIEM. You will implement and adapt detection rules for EDR monitoring, working with the client's team and Threat Modeling. You will create and adapt technical reports, using the client's tools when necessary. You will manage client security requests, such as log data extraction, enhancing alert context, and providing accurate incident recommendations tailored to containment and remediation strategies. How do we envision you? Intermediate to advanced level of English. At least 1 year of proven experience managing alerts. Knowledge of at least two of the technologies accepted by the service (Cortex XDR, Crowdstrike, Microsoft Defender for Endpoint, SentinelOne, Darktrace, Vectra...) Knowledge of MITRE. Understanding of networking, including networks, subnets, cloud, and virtual environments. Knowledge of operating system events, understanding what Event Viewer is. Basic forensic knowledge: knowing what an MFT table is, understanding EVTX files, etc. Knowledge of threats, APTs, techniques, tactics, and protocols used by attackers. Ability to manage an IR at a basic level—knowing which actions to take and how to execute them. What is it like to work at Deloitte? High-impact projects where you’ll have long-term growth and learning opportunities **️ A hybrid-flexible daily routine:** you'll enjoy flexible hours and a good balance between remote work and teamwork in our offices or at client sites **Positive atmosphere both inside and outside the office:** enjoy several team-building events each year, cultural and sports activities… and much more! ** ️ Holistic well-being:** take care of yourself with our physical, mental, and financial wellness programs… and access to medical staff in our offices! **Social impact:** participate in numerous national and international volunteering opportunities and pro-bono projects, dedicating your time and talent to those who need it most **️ Feedback culture and continuous learning:** grow in an inclusive environment where equal opportunities and your personalized training plan will drive your development. Can you already picture yourself at Deloitte University in Paris? **Exclusive benefits as a Deloitte member:** enjoy a wide range of benefits and a comprehensive flexible compensation plan **If you like what you read, here are your next steps:** Apply for the position by clicking ‘Submit application now’ and complete your profile. If you are a good fit, our talent team will contact you to get to know you better. Start the process! We’ll guide you through the different stages until your onboarding. Deloitte is a professional services firm strongly committed to equal opportunities. In this regard, the Firm will accept and process applications from all sectors of society, without discrimination based on sex, gender expression, race, religion or beliefs, ethnic or national origin, disability, illness or health condition, genetic predisposition to suffer pathologies, age, citizenship, marital status, sexual orientation or gender identity, socioeconomic situation, or any other personal or social condition or circumstance. **Location:** Madrid **Position Type:** Experienced Professionals **Service Line:** T\&T **Req Id:** 43449


