The English-language job board for Spain

SOC L1 Coordinator / Analyst 24x7

Hybrid in Madrid·Full-time·Added today (last checked 4 Nov)

DEVOTEAM

78 open roles

Apply

Our summary

Hours: Rotating shifts
Work mode: Hybrid, Madrid
Contract: Full-time
English: Required

Visa options

The ad doesn’t mention sponsorship
No sponsorship mentioned, and this kind of work is rarely sponsored in Spain.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

Languages

English B2

The role

We are looking for an L1 SOC Coordinator who combines two functions: coordinating the L1 analyst team of a multi-client SOC operating 24x7 (shifts, schedules, workload, and service quality) and working as an L1 analyst in alert monitoring and triage.

The position involves 24x7 rotating shifts and a hybrid modality (1-2 days in the office, the rest teleworking)

What you'll do

Monitor the alert queue in the SIEM and in the SOC security tools (SIEM, EDR, and SOAR). • Perform triage, classification, and prioritization of alerts, discard false positives, and document decisions.
Open, update, and escalate incidents according to the procedures and SLAs of each client. • Execute playbooks and basic first-level response actions.
Communicate with clients to notify incidents and request information.

About DEVOTEAM

Devoteam is a global IT consulting and digital transformation company headquartered in Levallois-Perret, France. With over 10,000 employees across more than 20 countries, Devoteam helps organizations leverage technology, particularly cloud platforms like Google Cloud, AWS, and Azure, to drive innovation and business growth. The company operates in multiple sectors, offering services in cloud engineering, cybersecurity, data analytics, and identity management.

In Spain, Devoteam has a significant presence with offices in Madrid and Barcelona, and many roles are offered with remote or hybrid work options. The company is known for its strong partnerships with major cloud providers and its focus on digital transformation. For international professionals, Devoteam offers opportunities to work on cutting-edge projects in a multicultural environment, with many positions requiring English proficiency and offering the possibility of fully remote work.

Founded: 1995
Employees: 10,000–15,000
Headquarters: Levallois-Perret, France
In Spain: Madrid, Barcelona

Good to know if you are moving

Devoteam has offices in Madrid and Barcelona, with many roles offering 100% remote work across Spain.
The company is a Google Cloud Premier Partner, offering opportunities to work on cutting-edge cloud projects.
Many positions require English proficiency, making it accessible for international professionals.
Devoteam provides a multicultural work environment with employees from various countries.
The company offers career development programs and certifications in cloud and cybersecurity.

In their own words

About the company & team

Devoteam is a leading European consultancy focused on digital strategy, technology platforms, cybersecurity, and business transformation through technology.

Technology is in our DNA, and we believe in it as a lever capable of driving change for the better, maintaining a balance that allows us to offer our client portfolio top-tier technological tools, but always with the closeness and professionalism of a team that acts as a guide along the way.

Devoteam has been committed to technology serving people for over 30 years. With more than 10,000 people in the group, across 20 countries in Europe, the Middle East, and Africa.

Plan and manage team schedules: 24x7 shifts, vacations, absences, shift changes, and on-call coverage, ensuring minimum coverage at all times.
Assign and balance the workload among L1 analysts and supervise response times and the SLAs agreed upon with clients.
Provide direct support to analysts: resolve doubts, review triage quality, and escalate to L2/L3 when appropriate.
Perform shift handovers and maintain follow-up on open incidents.
Accompany, train, and evaluate L1 analysts, and participate in the onboarding of new members.
Report the team status, workload, SLA breaches, and staffing needs to the SOC Manager.
Propose improvements to processes, procedures (SOP), and automation alongside the engineering and L2/L3 teams.

All open roles at DEVOTEAM