Senior SOC Analyst

Large incident response engagements can involve 20 or more responders working in shifts for weeks. Clifflight protects more than 4,000 organisations, from regional hospitals to Fortune 500 manufacturers. Training budget covers one SANS course or equivalent per year.

About the role:

Our team is growing and we are hiring a Senior SOC Analyst. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. This role is fully remote within Spain.

Responsibilities:

• Document incidents with timeline, impact and root cause
• Check threat intelligence feeds and IOCs against our environment
• Escalate confirmed incidents and follow the incident response plan
• Write and update SOC runbooks and playbooks
• Hand off open cases at shift change with clear notes
• Help with user access reviews and offboarding audits

Qualifications:

• 6+ years in an SOC, security analyst or IT security role
• Basic scripting in PowerShell or Python
• Clear written communication for incident tickets and reports
• Experience reading Windows Event Logs, Sysmon and Linux logs

Nice to have:

• Prior help desk or network administration experience
• CySA+, GCIH, GCIA or BTL1 certification
• Malware analysis in a sandbox

Compensation: €45,000 - €61,000 per year

Benefits:

• Private health insurance
• Flexible remuneration plan
• Life insurance
• Remote work allowance
• Meal vouchers
• Training budget

We review applications as they come in.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Clifflight S.L..