You work in the Security Operations Centre on a rotating shift, reviewing alerts raised by the monitoring tools. For each one you check the surrounding activity, decide whether it is a false positive or a genuine incident, and escalate the genuine ones to the response team with the evidence you gathered.
It is a common entry point into security: you learn the company's systems quickly because you see every part of them.
What you will do
- Triage alerts against the runbook and escalate what does not fit it
- Write the timeline of what happened while it is still fresh
- Flag detections that fire constantly and are worth tuning
What they ask for
- Understands TCP/IP, DNS and HTTP well enough to read a packet capture
- Can explain the difference between a scan and an intrusion
- Writes clearly under time pressure
Nice to have
- Home lab
- Any SIEM exposure
- Scripting in Python or PowerShell
📌 SOC Analyst (Tier 1) (Madrid)
🏢 Rooted
📍 Madrid
Postulate a este anuncio
Muestra tus habilidades a la empresa, rellenar el formulario y deja un toque personal en la carta, ayudará el reclutador en la elección del candidato.