Security Analyst

Large incident response engagements can involve 20 or more responders working in shifts for weeks. Clifflight protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers. Training budget covers one SANS course or equivalent per year.

Clifflight is hiring a Security Analyst to work remotely from Spain. The Security Operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Remote, open to candidates across Spain. You need a reliable internet connection and somewhere quiet to work.

Key responsibilities:

• Analyse reported phishing emails, check headers and URLs, and purge malicious messages.
• Escalate confirmed incidents and follow the incident response plan.
• Write and update SOC runbooks and playbooks.
• Report on security awareness training and phishing simulation results.
• Tune noisy detection rules with the security engineering team.

Required qualifications:

• Working knowledge of SIEM and EDR tools.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Must be able to pass a background check.
• CompTIA Security+ or equivalent (or ability to obtain within six months)

Why work with us:

Salary: €33,000 - €43,000 annually

• Private health insurance.
• Flexible remuneration plan.
• Training budget.
• Life insurance.
• Remote work allowance.
• Meal vouchers.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Clifflight S.L..