ppThe bSOC Specialist (m/f/d) /b is responsible for the design, maintenance, and enhancement of Security Operations Center (SOC) infrastructure and processes. They work closely with incident responders, analysts, and threat intelligence teams to optimize detection capabilities, improve SOC workflows, and ensure rapid incident triage and response. /p pThe working location for this position will be in Madrid city, where we are currently setting up a new office. /p h3Creating passion: your responsibilities /h3 ul liUse Case Development: Design and test new security use cases to enhance the detection and response capabilities of Liebherr’s SIEM system /li liLog Source Onboarding: Onboard and integrate various log sources into the SIEM system, ensuring comprehensive visibility across the organization’s IT environment /li liSOAR Playbook Implementation: Design, implement, and maintain SOAR playbooks to automate incident response processes and improve operational efficiency /li liSystem Optimization: Continuously evaluate and optimize the performance of the SIEM and SOAR systems to ensure they meet the evolving security needs of the organization. Also optimize costs in regards to Log sources and their retention /li liThreat Detection Engineering: Design and implement advanced detection techniques and perform threat hunting as well as lead tuning exercises and detection gap analysis /li liCollaboration: Work closely with the SOC team and other IT departments to ensure seamless integration of security tools and processes /li liDocumentation: Maintain thorough documentation of use cases,



log source configurations, and SOAR playbooks for future reference and compliance purposes /li /ul pNote that this role requires time on-call every 6 to 8 weeks. /p h3Contributing your strengths: your qualifications /h3 ul liBachelor’s/Master’s in Cybersecurity, Computer Science, or related field /li li3+ years in cybersecurity, ideally as SOC-Engineer /li liHands‑on knowledge of SIEM, and security analytics tools (e.g. Microsoft Sentinel, Microsoft Defender XDR, Elastic SIEM) /li liFamiliarity with SOAR platforms and automation processes (especially Microsoft Logic Apps, Microsoft Sentinel Automations) /li liExperience in security log source onboarding automation of security tasks /li liProficiency in scripting and programming languages (e.g. Python, PowerShell) for automation tasks /li liEnglish is a Must, German and French are a plus /li liUnderstanding of cybersecurity frameworks and standards (e.g. ISO27001, NIST, GDPR) /li liStrong analytical, problem‑solving skills and communication skills /li liFollowing certificates are a plus: GIAC Python Coder (GPYC), GIAC Cloud Security Automation (GCSA), GIAC Security Operations Certified (GSOC), Cloud certifications (AWS,



Azure, or GCP) /li /ul h3Our commitment to you: your benefits /h3 ul liCompetitive compensation and benefits package that recognizes your expertise /li liFlexible and hybrid working model /li liCreative freedom and responsibility to shape processes and solutions in our general transformation /li liContinuous learning and development with tailored training and certification opportunities /li liMeal vouchers /li liLife and accident insurance /li liOption to include a premium private health insurance package as part of the flexible remuneration /li liA safe, stable and international workplace within a trusted family business that invests in people /li /ul pPlease only use the online application option. /p pPlease note that we do not accept applications via recruitment agencies for this position. /p pHave we awoken your interest? Then we look forward to receiving your online application. If you have any questions, please contact Karoliina Rissanen. /p pOne Passion. Many Opportunities. /p h3The Company /h3 pLiebherr is a family-run technology company that is not only one of the largest construction machinery manufacturers in the world, but also offers high-quality, user‑oriented products and services in many other areas. The Group employs nearly 50,000 people in more than 140 companies on all continents. /p h3Location /h3 pLiebherr IT Shared Service Centre Ibérica, S.L.br/Madridbr/Spain (ES) /p h3Contact /h3 pKaroliina Rissanenbr/ /p /p #J-18808-Ljbffr

📌 SOC Specialist (m/f/d) (Madrid)
🏢 Liebherr Group
📍 Madrid