Overview

In this role you will install, configure and maintain SIEM/SOAR components for a 24x7 SOC. Based in the EU Regional Delivery Center, you will collaborate with analysts and engineers across a multi-platform stack to keep data healthy and actionable. You will contribute to threat detection engineering and to a tierless, AI-driven SOC. This position offers impact through scalable security operations and continuous platform optimization.

Responsabilidades

- Install, configure, and maintain SIEM/SOAR components and perform health checks
- Onboard and normalize new log sources; verify parsing and ingestion health
- Manage log-source and device health, baseline configurations, and weekly health reporting
- Participate in Change Management across the platform
- Provide SME support for the client SIEM solution and maintain up-to-date documentation
- Assist with log-collector/log-forwarder deployment and maintenance
- Support SOAR integration, playbook development, and content improvements




- Prepare technical reports and troubleshoot monitoring issues for clients
- Monitor performance and recommend upgrades and optimizations

Requisitos principales

- Experience with SIEM/SOAR platforms and 24x7 SOC operations
- Knowledge of log-source onboarding and data ingestion processes
- Ability to troubleshoot parsing issues and health of SIEM components
- Experience with change management and documentation maintenance
- Support experience for SIEM/SOAR integrations and playbooks
- Strong collaboration with cross-functional teams
- Proactive monitoring and reporting skills
- Client-facing SME capability

- Collaborative
- Problem-solving
- Communication
- SIEM and SOAR platforms (Splunk, Microsoft Sentinel, Google Sec Ops, Crowdstrike NG-SIEM)
- Log source onboarding and normalization
- Log parsing troubleshooting

📌 SOC Engineer (Málaga)
🏢 Accenture
📍 Málaga