Devoteam is a leading European consulting firm specializing in digital strategy, cloud platforms, and cybersecurity. With a workforce of over 10,000 professionals across more than 20 countries, the company serves as a strategic partner to major technology providers including Google Cloud, AWS, Microsoft, and ServiceNow, helping large enterprises navigate their digital transformation journeys.

In Spain, Devoteam maintains a robust presence with major operations in Madrid and Barcelona, focusing on high-demand sectors like cloud engineering, data analytics, and IAM security. The company is highly relevant for international professionals due to its multicultural environment, project-based work with global clients, and a flexible work culture that often includes 100% remote or hybrid options for technical roles.

Founded in 1995 in France by Godefroy and Stanislas de Bentzmann, Devoteam has grown from a local consultancy into a major European IT powerhouse. The company underwent a significant transformation in 2021, returning to private ownership to focus on its 'Infinite' strategic plan centered on cloud and data technologies.

For international professionals

Strategic partner for major cloud providers, offering extensive certification opportunities in AWS, Google Cloud, and Azure.
Multilingual work environment with numerous roles requiring English (C1) or French proficiency.
Flexible work-from-home policies, including several 100% teleworking positions for cloud and software engineers.
Strong focus on professional development through the Devoteam Academy and internal mobility programs.

This job was published 2 years ago

L2 SOC Analyst

DEVOTEAM

This job was originally posted in Spanish and automatically translated to English.

Job Description

Company Description

Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology. Focused on 6 areas of specialization, we address our clients' strategic challenges: Digital Business & Products, Data-driven Intelligence, Distributed Cloud, Business Automation, Cybersecurity, and Sustainability achieved through Digitalization.

Technology is in our DNA and we believe in it as a lever capable of driving change for improvement, maintaining a balance that allows us to offer our clients top-tier technological tools but always with the proximity and professionalism of a team that acts as a guide along the way.

Our 25 years of experience make us an innovative, consolidated, and mature consultancy that enables the development of our 10,000 people, continuously certifying our consultants in the latest technologies and counting on experts in: Cloud, BI, Data Analytics, Business Process Excellence, Customer Relationship Management, Cybersecurity, Digital Marketing, Machine Learning, and Software Engineering and development.

Devoteam has been awarded as the 2021 Partner of the Year by the 5 cloud leaders: AWS, Google Cloud, Microsoft, Salesforce, and ServiceNow. In Spain, we are present in Madrid, Barcelona, Zaragoza, and Bilbao.

Job Description

The functions you will perform are as follows:

- Management, validation, resolution, and control of detected incidents.

- Use of complementary data sources, such as threat intelligence sources, vulnerability data, and user information, to carry out improved correlation and analysis.

- Security analysis of current and historical alerts to identify malicious activities.

- Carry out event-oriented threat hunting, extract IOCs when applicable, and analyze for other security incidents.

- Problem isolation, impact analysis, and distribution of corrective measures.

- Likewise, advise on the improvement of the security posture, where appropriate.

- Identification of opportunities to customize and improve detection rules and digital Playbooks.

Conditions:

100% remote, flexible start time, summer hours, flexible compensation, and much more!

Requirements

Requirements:

- At least 2/3 years of practical experience in the management of SOAR solutions (troubleshooting and content development).

- Understanding of Chronicle and/or Cortex architecture. Proficient in Python. Experience in Linux systems administration and troubleshooting.

- Strong technical skills.

- Relevant certification.

- Experience as a SOC analyst.

Recommended:

- Experience with SIEM and big data systems.

Additional Information

View original advert (Spanish)

Descripción de la empresa

Devoteam es una consultora europea líder enfocada en estrategia digital, plataformas tecnológicas, ciberseguridad y transformación empresarial a través de la tecnología. Centrada en 6 áreas de especialización, abordamos los desafíos estratégicos de nuestros clientes: Digital Business & Products, Data-driven Intelligence, Distributed Cloud, Business Automation, Ciberseguridad y la Sostenibilidad conseguida por la Digitalización.

La Tecnología está en nuestro ADN y creemos en ella como una palanca capaz de impulsar el cambio para mejorar, manteniendo un equilibrio que nos permite ofrecer a nuestros clientes herramientas tecnológicas de primer nivel pero siempre con la cercanía y profesionalidad de un equipo que actúa como guía durante el camino.

Nuestros 25 años de experiencia nos convierten en una consultora innovadora, consolidada y madura que permite el desarrollo de nuestras 10.000 personas, certificando continuamente a nuestros consultores en las últimas tecnologías y contando con expertos en: Cloud, BI, Data Analytics, Excelencia en Procesos de Negocio, Gestión de la Relación con clientes, Ciberseguridad, Marketing Digital, Machine Learning, Ingeniería y desarrollo del Software.

Devoteam ha sido premiado como Partner del año 2021 de los 5 líderes de la nube: AWS, Google Cloud, Microsoft, Salesforce y ServiceNow. En España estamos presentes en Madrid, Barcelona, Zaragoza y Bilbao.

Descripción del empleo

Las funciones que realizarás son las siguientes:

- Gestión, validación, resolución y control de los incidentes
detectados.

- Uso de fuentes de datos complementarias, como fuentes de información
sobre amenazas, datos sobre vulnerabilidades e información sobre usuarios,
para llevar a cabo una correlación y un análisis mejorados.

- Análisis de seguridad de las alertas actuales e históricas para
identificar actividades maliciosas

- Llevar a cabo la búsqueda de amenazas orientada a los eventos,
extraer IOCs cuando sea aplicable y analizar para otros incidentes de seguridad

- Aislamiento de problemas, análisis del impacto y distribución de las
medidas de corrección.

- Asimismo, asesorar sobre la mejora de la postura de seguridad, cuando
proceda

- Identificación de oportunidades para personalizar y mejorar las
reglas de detección y las Playbooks digitales

Condiciones:

100% en remoto, horario de entrada flexible, jornada de verano, retribución flexible y ¡mucho más!

Requisitos

Requerimientos:

- Al menos 2/3 años de experiencia práctica en la gestión de soluciones SOAR (resolución de problemas y desarrollo de contenido)

- Comprensión en la arquitectura de Chronicle y/o Cortex Competente en Python Experiencia en administración y resolución de problemas de sistemas Linux.

- Fuertes habilidades técnicas.

-Certificación relevante.

- Experiencia como analista SOC.

Recomendable:

- Experiencia con SIEM y sistemas de big data.