L2 SOC Analyst

Description

Job Summary: We are seeking a cybersecurity expert to manage incidents, analyze threats, and enhance security posture by applying technical skills in SOAR and Linux environments. Key Highlights: 1. Security incident management and resolution 2. Security analysis and threat hunting 3. Advisory services to improve security posture - **Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology.** Concentrated on six areas of specialization, we address our clients’ strategic challenges: Digital Business & Products, Data-driven Intelligence, Distributed Cloud, Business Automation, Cybersecurity, and Sustainability through Digitalization. Technology is in our DNA, and we believe in it as a lever capable of driving change for improvement, maintaining a balance that enables us to offer our clients top-tier technological tools—always with the proximity and professionalism of a team acting as a guide along the way. Our **25 years of experience** make us an innovative, established, and mature consultancy, enabling the development of our **10\.000 professionals**, continuously certifying our consultants in the latest technologies and counting on experts in: Cloud, BI, Data Analytics, Business Process Excellence, Customer Relationship Management, Cybersecurity, Digital Marketing, Machine Learning, Software Engineering and Development. Devoteam has been awarded Partner of the Year 2021 by the five cloud leaders: **AWS, Google Cloud, Microsoft, Salesforce, and ServiceNow.** In Spain, we operate in Madrid, Barcelona, Zaragoza, and Bilbao. **Your responsibilities will include:** * Incident management, validation, resolution, and monitoring. * Use of supplementary data sources—including threat intelligence feeds, vulnerability data, and user information—to perform enhanced correlation and analysis. * Security analysis of current and historical alerts to identify malicious activities. * Conducting event-driven threat hunting, extracting IOCs where applicable, and analyzing for other security incidents. * Problem isolation, impact analysis, and distribution of corrective actions. * Providing advisory support to improve security posture, as appropriate. * Identifying opportunities to customize and improve detection rules and digital playbooks. **Conditions:** 100% remote work, flexible start time, summer working hours, flexible compensation, and much more! **Requirements:** * Minimum 2–3 years of hands-on experience managing SOAR solutions (troubleshooting and content development). * Understanding of Chronicle and/or Cortex architecture; proficiency in Python; experience administering and troubleshooting Linux systems. * Strong technical skills. * Relevant certification. * Experience as a SOC analyst. **Preferred:** * Experience with SIEM and big data systems.