Remoto: Teletrabajo

Overview¿Listo para inscribirse? Antes de hacerlo, asegúrese de leer todos los detalles pertenecientes a este trabajo en la descripción a continuación.In this role you will advance security operations beyond traditional incident response by integrating AI-driven investigations, automation, and agentic security workflows. You’ll lead complex investigations while shaping detection engineering and response capabilities to reduce alerts and improve efficiency. Partner with security architects to deploy AI-assisted techniques and SOAR-driven playbooks. This position offers the chance to impact how a growing SOC scales with automation and intelligent workflows.Compensaciones / BeneficiosFully remote work (optional)Adaptable scheduleFlexible compensation (transport, childcare)Health insurance with dental co-paymentTraining budget and Microsoft certificationsEnglish lessonsResponsabilidadesLead complex incident investigations and advanced security escalationsAnalyze activity across endpoint, identity, network, cloud, and SIEM to determine scope and response actionsDesign, build, and improve detection rules, correlation logic, and investigation queriesDevelop security automations, integrations,



and SOAR playbooks to streamline workflowsCollaborate with security architects and engineers to implement AI-assisted and agentic security capabilitiesIdentify opportunities to apply AI for investigation support, enrichment, evidence summarization, and response recommendationsAct as technical reference for L1 and L2 analysts to improve escalations, procedures, and maturityDrive continuous improvement to reduce alert fatigue, increase detection quality, and improve response efficiencyRequisitos principales6+ years of SOC experience with solid L3 investigations or advanced escalationsStrong background in Incident Response, Threat Hunting, Detection Engineering, and Security OperationsExperience investigating threats across endpoint, identity, network, and cloudHands-on xcgbitx experience with SIEM and EDR/XDR technologiesStrong query skills using KQL, SPL, or equivalentExperience with Microsoft Sentinel, Microsoft Defender XDR, or similar platformsScripting and automation experience with Python, PowerShell, APIs, or SOARInterest in applying AI and agentic security concepts to real-world operationsAbility to own initiatives from idea to implementation and collaborate across teamsFluent in Spanish and EnglishCollaborative mindsetProactive problem-solvingClear communication across technical and non-technical stakeholdersKQLSPLSIEM

📌 Agentic Detection & Response Specialist (Islas Baleares)
🏢 MindMatch
📍 Islas Baleares