The English-language job board for Spain
91,000+ live jobsSOC Technician Level 1/1.5
Remote, Madrid·Part-time·Added 10 days ago (last checked 26 Oct)
58 open roles
Our summary
- Hours
- Rotating shifts, including nights · Includes weekends
- Work mode
- Remote (Madrid)
- Contract
- Part-time
- Benefits
- Private health insurance, flexible pay plan, meal vouchers, gym access




Visa options
The ad doesn’t mention sponsorship
Not a refusal, but not a yes. Worth asking in your first message.
Skills
This job advert was originally written in Spanish.
Requirements
What we're looking for
Solid foundation and some real operational exposure:
Minimum experience: 6-12 months in SOC, monitoring, security support, incident response, or equivalent intensive internships with on-call/shifts and use of tools.
Demonstrable knowledge of
Windows operating systems (events, processes, services) and Linux fundamentals.
Networks: TCP/IP, DNS, HTTP/HTTPS, proxy, VPN, segmentation concepts, and basic troubleshooting.
Cybersecurity fundamentals: types of malware, phishing, common intrusion techniques, triage, and containment.
Handling of tools (at least one, at an operational level): SIEM (searches, filters, dashboards, basic correlations) and/or EDR/XDR (endpoint telemetry, isolation, basic analysis).
Documentation capacity: clear and orderly writing of tickets, evidence, and technical conclusions.
Availability for 24x7 shifts: weekly rotation (morning/afternoon/night), 5 days/week, including weekends and holidays according to planning.
Nice to have
Experience with SIEM (e.g., PA XSIAM, Sentinel, Vision One, etc.) and/or EDR/XDR (e.g., Defender / Cortex / Trend Micro, etc.).
Familiarity with MITRE ATT&CK, IoCs (IPs, domains, hashes), and basic log analysis (Windows, firewall, proxy, email).
Knowledge of email and security (phishing, spoofing, SPF/DKIM/DMARC at a conceptual level).
Experience following operating procedures, SLAs, and escalation models.
Certifications or specific training (e.g., SC-900, eJPT or other equivalents), not essential.
Pay & benefits
What you'll get
Stable job position.
Dynamic and collaborative work environment.
Opportunities for professional development and continuous training.
Online language classes to reinforce conversation.
Work modality: remote
Day off on your birthday
Possibility of joining flexible compensation plans (restaurant card, transport card, and childcare card)
Medical insurance and Wellhub
Special discount portal for employees
The role
At Logicalis Spain we are looking for a SOC Technician Level 1/1.5 to work for one of our clients.
The selected person will join the Security Operations Center (SOC) to perform continuous 24x7 monitoring of the client's systems.
They will be responsible for early detection, initial analysis (triage), and the operational management of alerts and incidents, ensuring complete documentation and escalation to Level 2 according to established procedures and SLAs.
They will work with multiple technologies (SIEM, EDR/XDR, perimeter security, email, proxy, etc.) and apply playbooks to ensure a rapid, consistent, and traceable response.
What you'll do
Real-time monitoring of security alerts and events in SIEM and associated consoles.
Classification and prioritization of events (true positive / false positive / benign / informative) with criteria and context.
Initial triage: analysis of evidence, validation of impact, scope, and urgency (according to procedures).
Opening, documenting, and updating security tickets with quality (timeline, evidence, actions, and conclusions).
Execution of standard actions defined in playbooks: IP/URL/domain blocking, endpoint isolation, basic containment, etc. (according to permissions and procedures).
Structured escalation to Level 2 / specialist teams (IT, networks, systems) when appropriate, including technical context and recommendations.
Handover and shift summaries: operational continuity, open risks, and next steps.
Participation in continuous improvement: proposals for playbook adjustments, noise reduction, documentation improvements, and service quality.
How you'll work
Shifts: weekly rotating 8-hour shifts (morning/afternoon/night), 5 days a week, with weekends and holidays according to the service roster.
Work arrangement
Modality: remote (exclusively from Spain).
Environment oriented towards procedures, continuous improvement, and technical learning.
What do we offer?
At Logicalis Spain we are an international group with more than 20 years of experience in the IT sector, linked to large-scale projects and services in Data Centers, Cybersecurity, and Analytics.
More jobs like this
or browse Madrid·Engineering·Mid-level·Remote·Community of Madrid
