SOC L1
- German Speaker
- EY GDS Spain
- Hybrid
- 24x7 ShiftsSOC (Security Operations Center) is a core pillar of modern cybersecurity. In this role, you manage vulnerabilities end to end – from identification and risk-based prioritization to sustainable risk reduction. You operate at the intersection of technology, operations, and management, enabling informed security decisions and measurable improvement of the organization’s attack surface.
As a SOC at EY GDS Spain, you are the first line of defense in a 24/7 Cyber Security German-speaking clientsIn addition, you help design and roll out vulnerability management landscapes (tooling, processes, integrations, and operating models) to establish scalable, repeatable capabilities across environments.
As a member of our team in theEY GDS Spain office in Malaga, you’ll have a chance to extend your knowledge & experience by working on interesting projects with the newest technologies and approaches. You’ll support clients in choosing the most suitable business solution and take part in digital transformation.
Your

key responsibilities
Design, operate, and continuously improve an end-to-end vulnerability management processDesign and roll out vulnerability management landscapes: tooling strategy, target architecture, integrations (e.
G., ITSM), and operating modelContinuously identify, consolidate, and assess vulnerabilities across technical systems and environmentsPerform risk-based prioritization by considering technical and organizational context (asset criticality, exposure, compensating controls, business impact)Coordinate and track remediation activities with responsible teams and stakeholdersMaintain transparency on status, progress, exceptions, and accepted risksPrepare structured reporting for operational, tactical, and strategic stakeholders (status, risk,



trends, KPIs)Support internal reviews, audits, management assessments, and decision-making processesContinuously optimize vulnerability management processes, methods, and metrics to improve maturity and measurable outcomesSkills and attributes for successStructured, analytical, and self-driven working style with strong ownershipAbility to communicate complex technical topics clearly and effectively to diverse stakeholdersStrong coordination and stakeholder management skills across technology, operations, and managementHigh sense of responsibility and quality awareness; focus on auditability and traceabilityAbility to translate security requirements into operationally feasible remediation plans and measurable progressTo qualify for the role, you must have1
- +2 years of experience in vulnerability management, security management, or IT securitySolid understanding of IT infrastructures, platforms, and system environmentsExperience with vulnerability lifecycle management from detection through remediation, verification, and risk acceptanceCompleted education or degree in a technical or information-technology related field (or equivalent practical experience)English at least B2 (written and spoken) is required.
German at least B2 (written and spoken) is required.
Ideally,



you’ll also haveHands-on experience with vulnerability management platforms such as Tenable and/or Qualys (nice to have)Experience working in regulated environments and/or supporting audit and compliance requirementsFamiliarity with common scoring and prioritization approaches (e.
G.,CVSSas an input to risk-based prioritization) and KPI-driven reportingExperience collaborating with engineering, operations, and service management teams in complex environmentsWhat we look forWe look for proactive owners who turn vulnerability data into action—connecting engineers, operations, and leaders to drive risk down. You communicate crisply, keep stakeholders aligned, and build repeatable, audit-ready processes that hold up under pressure. If you enjoy creating clarity from complexity and delivering measurable reduction in exposure, you’ll thrive here.

What we offer
In EY GDS Spain, we’re committed to fostering a vibrant environment where every team member can thrive. We provide a space forcontinuous learningand theflexibility to define your own success, empowering you to make a meaningful impact in your own way. Ourdiverse and inclusive culturevalues who you are and encourages you to help others find their voice.
Additionally, here’s what makes us stand out:Empowering Career Development : Unlock your potential with tailored training and development programs designed to elevate your skills and propel your career forward. We invest in your growth because your success is our success.
Versátil Work-Life Integration : Enjoy the freedom of our hybrid work model, allowing you to blend professional responsibilities with personal passions. We understand that life is more than just work, and we support you in achieving that balance.
Comprehensive Well-Being Programs : Prioritize your health with our extensive wellness initiatives, including psychological support sessions

📌 Soc (Madrid)
🏢 Ey
📍 Madrid