The English-language job board for Spain

SOC Technician Level 1/1.5

Remote, Madrid·Part-time·Added 10 days ago (last checked 26 Oct)

Our summary

Hours
Rotating shifts, including nights · Includes weekends
Work mode
Remote (Madrid)
Contract
Part-time
Benefits
Private health insurance, flexible pay plan, meal vouchers, gym access

Visa options

  • The ad doesn’t mention sponsorship

    Not a refusal, but not a yes. Worth asking in your first message.

Find jobs with visa support

Skills

This job advert was originally written in Spanish.

Requirements

What we're looking for

Solid foundation and some real operational exposure:

  • Minimum experience: 6-12 months in SOC, monitoring, security support, incident response, or equivalent intensive internships with on-call/shifts and use of tools.

  • Demonstrable knowledge of

    • Windows operating systems (events, processes, services) and Linux fundamentals.

    • Networks: TCP/IP, DNS, HTTP/HTTPS, proxy, VPN, segmentation concepts, and basic troubleshooting.

    • Cybersecurity fundamentals: types of malware, phishing, common intrusion techniques, triage, and containment.

  • Handling of tools (at least one, at an operational level): SIEM (searches, filters, dashboards, basic correlations) and/or EDR/XDR (endpoint telemetry, isolation, basic analysis).

  • Documentation capacity: clear and orderly writing of tickets, evidence, and technical conclusions.

  • Availability for 24x7 shifts: weekly rotation (morning/afternoon/night), 5 days/week, including weekends and holidays according to planning.

Nice to have

  • Experience with SIEM (e.g., PA XSIAM, Sentinel, Vision One, etc.) and/or EDR/XDR (e.g., Defender / Cortex / Trend Micro, etc.).

  • Familiarity with MITRE ATT&CK, IoCs (IPs, domains, hashes), and basic log analysis (Windows, firewall, proxy, email).

  • Knowledge of email and security (phishing, spoofing, SPF/DKIM/DMARC at a conceptual level).

  • Experience following operating procedures, SLAs, and escalation models.

  • Certifications or specific training (e.g., SC-900, eJPT or other equivalents), not essential.

Pay & benefits

What you'll get

  • Stable job position.

  • Dynamic and collaborative work environment.

  • Opportunities for professional development and continuous training.

  • Online language classes to reinforce conversation.

  • Work modality: remote

  • Day off on your birthday

  • Possibility of joining flexible compensation plans (restaurant card, transport card, and childcare card)

  • Medical insurance and Wellhub

  • Special discount portal for employees

The role

At Logicalis Spain we are looking for a SOC Technician Level 1/1.5 to work for one of our clients.

The selected person will join the Security Operations Center (SOC) to perform continuous 24x7 monitoring of the client's systems.

They will be responsible for early detection, initial analysis (triage), and the operational management of alerts and incidents, ensuring complete documentation and escalation to Level 2 according to established procedures and SLAs.

They will work with multiple technologies (SIEM, EDR/XDR, perimeter security, email, proxy, etc.) and apply playbooks to ensure a rapid, consistent, and traceable response.

What you'll do

  • Real-time monitoring of security alerts and events in SIEM and associated consoles.

  • Classification and prioritization of events (true positive / false positive / benign / informative) with criteria and context.

  • Initial triage: analysis of evidence, validation of impact, scope, and urgency (according to procedures).

  • Opening, documenting, and updating security tickets with quality (timeline, evidence, actions, and conclusions).

  • Execution of standard actions defined in playbooks: IP/URL/domain blocking, endpoint isolation, basic containment, etc. (according to permissions and procedures).

  • Structured escalation to Level 2 / specialist teams (IT, networks, systems) when appropriate, including technical context and recommendations.

  • Handover and shift summaries: operational continuity, open risks, and next steps.

  • Participation in continuous improvement: proposals for playbook adjustments, noise reduction, documentation improvements, and service quality.

How you'll work

  • Shifts: weekly rotating 8-hour shifts (morning/afternoon/night), 5 days a week, with weekends and holidays according to the service roster.

Work arrangement

  • Modality: remote (exclusively from Spain).

  • Environment oriented towards procedures, continuous improvement, and technical learning.

What do we offer?

At Logicalis Spain we are an international group with more than 20 years of experience in the IT sector, linked to large-scale projects and services in Data Centers, Cybersecurity, and Analytics.

WhatsApp