Operations Cybersecurity Technician

Guarantee the resilience and effectiveness of cybersecurity operations through continuous analysis, coordination, supervision, and validation of actions, evaluating risks and ensuring regulatory compliance, while maintaining a transversal vision across all fields of cybersecurity.

Active protection of the company's infrastructure and information through advanced analysis of security alerts, incident investigation and containment, threat response coordination, and continuous optimization of detection and operational monitoring controls.

• Alert management and advanced triage: Monitor, analyze, and validate security events generated by detection platforms (SIEM, EDR/XDR, WAF, etc.)

• Incident investigation: Perform the initial and detailed technical investigation of cybersecurity incidents, determining the scope, entry vector, and impact on corporate and hybrid systems.

• Containment and remediation: Supervise and validate immediate containment actions against detected threats (endpoint isolation, blocking of IOCs, credential revocation) and coordinate the execution of mitigation plans.

• Vulnerability analysis and management: Evaluate technical findings in exposure management tools, prioritizing patches and remediations according to the risk level.

• Supervision and optimization of detection rules: Validate the correct functioning of security platforms and collaborate closely on configuration adjustments, use case development, and optimization of correlation rules to reduce false positives and improve response times (SLA/SLO).

• Threat Hunting and Threat Intelligence: Apply indicators of compromise (IoCs) and MITRE ATT&CK framework techniques for the proactive identification of anomalies not detected by automatic rules.

• Maintenance of Playbooks and procedures: Document and drive the continuous update of standard operating procedures and automation workflows.

• • Education: Degree/Engineering in Computer Science, Telecommunications, or equivalent technological branches.

  • Complementary training: Postgraduate training or Master's in Cybersecurity and professional certifications are desirable. Knowledge of system hardening and defensive architecture.

  • Specific knowledge: Operational supervision of SIEM/SOAR tools and EDR/XDR solutions, as well as the validation of their configurations in collaboration with third parties. Initial malware analysis techniques, forensic log triage, and alignment with attack frameworks (MITRE ATT&CK). Knowledge in securing and investigating alerts in Cloud and hybrid environments, networks, and identity management (IAM/PAM).

  • Languages: English level B2.

  • Experience: Minimum of 3 to 5 years in Cybersecurity Operations roles (SOC N2), Incident Response, or Defensive Security SecOps. Demonstrable experience in alert investigation, security incident management and containment, and the application of response playbooks.

  • Corporate competencies: Analytical and problem-solving capacity, high orientation to results, effective communication, adaptability to change, and teamwork.

Prezero España
C/Dédalo, 2, 28037, Madrid
T: 915 862 972

https://prezero.es/

Reference ID: 14804