Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$59к$67кмедиана$68к
7 в выборке
86
Хорошая вакансия
развернуть
Чётко описанная роль senior-уровня в SOC крупной европейской биржевой группы с сильным фокусом на реагирование и разработку детектов; условия оплаты не указаны.
Крупная финансовая группа
Сильный профиль роли
Поддержка развития
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
SOC Analyst (Cybersecurity): Developing and tuning threat detections, investigating complex security incidents, and strengthening SOC capabilities across endpoint, identity, network, cloud, and email environments with an accent on SIEM use cases, incident response, automation, and threat hunting. Focus on designing SOAR workflows and playbooks, analyzing threats with MITRE ATT&CK, closing detection gaps, and coordinating containment and remediation.
Location: Madrid, with working from home up to 40%
Company
hirify.global is a European exchange group whose BME business drives the transformation of financial markets.
What you will do
Develop, tune, and maintain threat detections and SIEM use cases across endpoint, network, identity, cloud, email, and M365 environments.
Investigate complex security incidents, lead threat analysis, and coordinate containment and remediation.
Design and improve detection content, SOC automation, SOAR workflows, and incident response playbooks.
Conduct proactive threat hunting using threat intelligence and the MITRE ATT&CK framework.
Identify detection gaps and enhance SOC capabilities and security posture.
Mentor junior analysts and contribute to SOC process improvements and knowledge sharing.
Requirements
4+ years of experience in SOC operations, detection engineering, threat hunting, and incident response.
Hands-on experience with SIEM, EDR, and SOAR platforms, preferably Sentinel, Elastic, Defender for Endpoint, and Cortex XSOAR.
Strong background in detection rule development, security investigations, and threat hunting across multiple telemetry sources.
Experience with scripting, automation, APIs, Python, GitLab, Azure DevOps, and CI/CD practices.
Knowledge of security query languages and frameworks, including MITRE ATT&CK.
Strong analytical, communication, collaboration, and mentoring skills.
Applications must be submitted directly in English with an English CV.
Culture & Benefits
Flexible hybrid work model with up to 40% working from home.
Continuous learning, feedback, and extensive personal development opportunities.
Agile working methods including Scrum and design thinking.
Collaborative environment focused on solving complex security tasks and sharing knowledge.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →