SOC

· More than 5 years of professional experience in Incident Response, managing medium to critical level incidents.

· Practical experience in triage, containment, remediation, and end-to-end investigations.

· Experience collaborating with Escalation Management, Engineering/Product, IT, Legal, Cloud Operations, and cybersecurity teams.

· University degree in Information Technology or equivalent training.

· High level of English (minimum B2, spoken and written).

· Expert knowledge in SIEM (preferably Splunk), SOAR platforms, and EDR solutions.

· Solid understanding of attack techniques and defensive technologies.

· Advanced knowledge of digital forensics in Windows, macOS, Linux, and cloud environments.

· Experience in cloud incident response, including native logging and identity investigation.

· Knowledge of application security, application-level attacks, and SaaS threats.

· Flexible compensation: €2,700 annually to be distributed between meal vouchers (up to €200/month) and transport (€25/month).

· Medical insurance valued at €546.96 annually (€45.58/month).

· Teleworking allowance: €268.92 annually (approx. €22.41/month), added to payroll.

· Wellbeing: reimbursement for sports activities (gym, swimming pool, etc.) up to €300 annually, added to payroll upon presentation of an invoice.

Job Description - SOC Incident Response Expert Analyst (Morning Shift)

Schwarz Digits - Cyber Defense Center (CDC) | Barcelona

· Job title: SOC - Incident Response Analyst Expert (morning shift).

· Location: Barcelona (Calle Bergara 13).

· Contract type: Full-time, senior/experienced level.

· Coordinate and communicate security incidents between teams and countries, managing the end-to-end incident response process.

· Detect, analyze, and contain security incidents, ensuring effective remediation.

· Reconstruct cyberattacks and analyze malware to define corrective actions.

· Develop and improve anomaly and attack detection mechanisms.

· Monitor the global threat landscape and provide actionable recommendations.

· Advise internal projects on security-related matters.

· Perform IT forensic investigations (timeline reconstruction and artifact analysis).

· Prepare clear and useful security incident reports for technical and non-technical audiences.

· Schedule: fixed morning shift, Monday to Friday, from 05:45 to 14:00 (no rotations).

· Mission: lead advanced incident response activities, technical investigation, and continuous improvement within the SOC. This is a hands-on technical role, not a Tier-1 monitoring position.

· NIST Cybersecurity Framework

· BSI Grundschutz

· Internal ticketing system / SOAR: Fortinet FortiSOAR.

· Malware Sandbox: VMRay Sandbox, Any.Run and VirusTotal.

· M365 Security: Microsoft Defender (Endpoint, Identity, Cloud Apps, Office).

· Threat Intelligence: MISP, Recorded Future and DFIR Report.

· Digital forensics: Timesketch, Magnet AXIOM and other DFIR tools.

· SIEM / Detection: Splunk (preferred) and enterprise EDR solutions.

· Work within a consolidated Cyber Defense Center with international scope.

· Strong culture of learning and continuous training.

· Highly technical role focused on real investigation and continuous improvement.

· Real growth opportunities within a global cybersecurity organization.