As a Security Analyst Level 1, you are the first line of defense within our 24x7 Managed Detection & Response (MDR) operations, part of the Cyber Fusion Center (CFC) / SOC.

Your mission is to monitor, triage, and validate security alerts, ensuring timely escalation of confirmed threats while maintaining high operational quality across a You will operate within clearly defined procedures, using modern security tooling and to improve investigation efficiency, documentation quality, and learning velocity—while adhering strictly to escalation paths, data-handling rules, and security policies. You are based in Madrid, Spain, working a 24/7 shift rotation (morning, evening, night, and weekends) in a permanent, full-time role, reporting to the SOC Manager within a team of 15-20 L1 Analysts. General responsibilities Monitor and triage security alerts generated by SIEM, EDR/XDR, firewalls, ICS/OT, and other security technologies to determine if further investigation or customer action is warranted.

Perform first-level incident analysis, validation, and classification following SOPs and playbooks. Adhere to internal policies, procedures, and security best practices to protect customer and company data. Participate in shift handovers, ensuring continuity of investigations and clear ownership of next actions.

Threat monitoring & incident handling Validate alert fidelity by reviewing available telemetry, context, and enrichment to separate false positives from true security events. Perform initial scoping (impacted host/user, time window, key indicators, related alerts) using approved tools and data sources.



Support ongoing investigations by providing timely updates and evidence to senior analysts.

Willing to work in a 24/7 shift-based operation. More than 1 year of experience in cybersecurity, IT operations, or a related field (internships, labs, or SOC trainings), typically analyzing logs and host data to identify suspicious/abnormal activity. Initial to intermediate exposure to SIEM and/or EDR/XDR platforms for log analysis and detection.

Understanding of TCP/IP, security architecture, adversary TTPs, common web attacks, and the MITRE ATT&CK; framework. Familiarity with incident response methodologies (NIST/SANS) and fundamentals in networking and operating systems (Windows/Linux). Understanding of appropriate AI usage in security contexts.

Fluent in English and Spanish (written and verbal). CompTIA Security+, CySA+, CEH, or BTL1 (or actively pursuing). Hands-on experience in a global MDR operation with top-tier security tooling. Training and certification opportunities.

Competitive compensation and benefits (including shift compensation/paid overtime, meal allowance, life insurance, health insurance, pension plan, and flexible compensation options).

About Kudelski Security Kudelski

Security is a integral Gartner- and Forrester-recognized provider of unique cybersecurity solutions. Our team of security experts delivers end-to-end consulting, technology, managed services, and threat intelligence. Our MDR/XDR services feature three global state-of-the-art SOCs delivering tailored, intelligence-driven protection.

Kudelski

Security is an equal opportunity employer. Hay opciones de teletrabajo/trabajo desde casa disponibles para este puesto.

📌 Security Analyst (Vigo)
🏢 Kudelski Security
📍 Vigo