N2 DFIR Analyst

Education

Required:

Degree in Computer Engineering or higher, Telecommunications, or equivalent.

Desirable:

Relevant certifications such as GCFA, GCFE, CEH, CompTIA Security+, or similar.

Required: Catalan language, spoken and written.

Valuable: advanced English level (B2/C1), both written and spoken, to interact with suppliers.

• Work-life balance measures and flexible working hours. • Ongoing training and certifications. • Hybrid remote work model. • Attractive social benefits package. • Excellent dynamic and multidisciplinary work environment. • Volunteering programs. #WeAreDiverse #WePromoteEquality

WHAT WILL YOUR DAY-TO-DAY BE LIKE?

Your mission will be to ensure the correct identification, analysis, and response to computer security incidents, applying best practices in cybersecurity and working in coordination with N1 and N3 teams. Your day-to-day:

Your day-to-day will include

Monitor and manage alerts from security tools (SIEM, IDS/IPS, etc.).

Analyze and prioritize detected incidents, identifying their impact and origin.

Execute incident containment, eradication, and recovery plans.

Collaborate with internal and external teams in investigating complex incidents.

Generate detailed reports on security events, incidents, and trends.

Propose improvements to cybersecurity policies and procedures.

Escalate incidents to higher levels (N3) when necessary.

Contribute to updating and maintaining indicators of compromise (IoCs).

Participate in incident response simulations and cybersecurity exercises.

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

Experience

More than 2 years in roles related to cybersecurity analysis, incident management, and SOC/CERT operations.

Previous experience in high-criticality environments.

Advanced knowledge in digital forensics, cyber intelligence, and intermediate knowledge in ethical hacking techniques and malware analysis.

Familiarity with security frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.

Experience in operating SIEM tools (Splunk, QRadar, etc.) and EDR/XDR solutions.

Configuration and analysis of security tools (SIEM, IDS/IPS, EDR, firewalls, WAF).

Acquisition and analysis of artifacts using forensic tools (KAPE, Velociraptor, Eric Zimmerman, Sysinternals, Nirsoft, X-Ways, Wireshark, tcpdump, etc).

Identification of Indicators of Compromise (IoCs) and analysis of attacker TTPs.

Scripting for task automation (Python, PowerShell, Bash).

Concepts in vulnerability management and risk analysis.

To perform the role, the skills that would best fit the team and the project would be:

Problem-solving: ability to analyze complex situations and make quick decisions.

Teamwork: skills to collaborate with multiple teams under pressure.

Effective communication: conveying technical findings to non-specialist audiences.

Proactivity: attitude oriented toward continuous improvement of processes and tools.

Critical thinking: anticipating potential impacts and mitigating them before they occur.