Telefónica is one of the world's largest telecommunications providers, operating a vast network across Europe and Latin America. Headquartered in Madrid, the company provides a comprehensive suite of services including mobile and fixed connectivity, digital television, and advanced technology solutions such as cybersecurity, cloud computing, and IoT through its major brands like Movistar and O2.

As a Spanish multinational and a cornerstone of the IBEX 35, Telefónica is a primary destination for international professionals in Spain. The company maintains a massive corporate ecosystem that fosters innovation through its Telefónica Tech and Telefónica Global Technology divisions, offering a multicultural environment with significant opportunities for career progression in engineering, data science, and digital transformation.

Founded in 1924 as Compañía Telefónica Nacional de España (CTNE), it was originally a state-owned monopoly before being fully privatized in the 1990s. Since then, it has expanded aggressively into international markets, particularly in Latin America and Europe.

For international professionals

Telefónica is one of Spain's largest employers, providing high job stability and a structured corporate career path.
The company's global headquarters, 'Distrito Telefónica' in Madrid, is a massive campus featuring its own health centers, sports facilities, and diverse dining options.
They offer specialized 'Talentum' programs and internships that are highly accessible to international graduates and young professionals.
While Spanish is the primary language for local operations, English is frequently used within their global technology, cybersecurity, and strategy departments.
The company has a strong presence in multiple Spanish regions beyond Madrid, including major tech hubs in Barcelona and Logroño.

Tech_Analyst L2-DFIR (Barcelona)

Telefónica

This job was originally posted in Spanish and automatically translated to English. You'll most likely need Spanish to apply.

Job Description

WHAT IS TELEFONICA TECH?

Telefónica Tech is the leading digital transformation company of the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, accompanying our clients through their digital transformation.

We are a group of more than 6,200 brave people working daily from different parts of the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we look forward to meeting you!

www.telefonicatech.com

WHAT DO WE DO IN THE TEAM?

In Telefónica's Cybersecurity and Incident Response unit, we manage, analyze, and mitigate security incidents in real time. We specialize in protecting our clients' critical assets against digital threats, ensuring business continuity and minimizing risks. We work closely with multidisciplinary teams to guarantee an effective response tailored to the needs of each organization.

WHAT WILL YOUR DAY-TO-DAY BE LIKE?

Your mission will be to ensure the correct identification, analysis, and response to IT security incidents, applying cybersecurity best practices and working in coordination with L1 and L3 teams. Your day-to-day:

Your day-to-day will include:

Monitoring and managing alerts from security tools (SIEM, EDR, IDS/IPS, etc.).
Analyzing and prioritizing detected incidents, identifying their impact and origin.
Executing containment, eradication, and recovery plans for incidents.
Collaborating with internal and external teams in the investigation of complex incidents.
Generating detailed reports on events, incidents, and security trends.
Proposing improvements to cybersecurity policies and procedures.
Escalating incidents to higher levels (L3) when necessary.
Contributing to the update and maintenance of indicators of compromise (IoCs).
Participating in incident response simulations and cybersecurity exercises.

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

Experience

More than 2 years in roles related to cybersecurity analysis, incident management, and SOC/CERT operations.
Previous experience in high-criticality environments.
Advanced knowledge in digital forensics, cyber intelligence, and intermediate knowledge of ethical hacking techniques and malware analysis.
Familiarity with security frameworks and standards such as NIST, ISO 27001, and MITRE ATT&CK.
Experience operating SIEM tools (Splunk, QRadar, etc.) and EDR/XDR solutions.

Education

Required:

Degree in Technical Computer Engineering or higher, Telecommunications, or equivalent.

Desirable:

Relevant certifications such as GCFA, GCFE, CEH, CompTIA Security+, or similar.

Technical Knowledge

Configuration and analysis of security tools (SIEM, IDS/IPS, EDR, firewalls, WAF).
Acquisition and analysis of artifacts using forensic tools (KAPE, Velociraptor, Eric Zimmerman, Sysinternals, Nirsoft, xways, Wireshark, tcpdump, etc).
Identification of Indicators of Compromise (IoCs) and analysis of attacker TTPs.
Scripting for task automation (Python, PowerShell, Bash).
Concepts in vulnerability management and risk analysis.

To perform the role, the skills that would fit the team and the project would be:

Problem solving: ability to analyze complex situations and make quick decisions.
Teamwork: skills to collaborate with multiple teams under pressure.
Effective communication: conveying technical findings to non-specialized audiences.
Proactivity: an attitude oriented toward the continuous improvement of processes and tools.
Critical thinking: anticipating possible impacts and mitigating them before they occur.

LANGUAGES

Mandatory: Catalan language, spoken and written.
Valuable: advanced level of English (B2/C1), both written and spoken, to interact with providers.

WHAT DO WE OFFER?
• Work-life balance measures and flexible scheduling.
• Continuous training and certifications.
• Hybrid remote work model.
• Attractive social benefits package.
• Excellent dynamic and multidisciplinary work environment.
• Volunteering programs. #SomosDiversos #Fomentamosigualdad
We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results.
Therefore, we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition.

We want to meet you! 😊

View original advert (Spanish)

¿QUÉ ES TELEFONICA TECH?

Telefónica Tech es la compañía líder en trasformación digital del Grupo Telefónica. Contamos con una amplia oferta de servicios y soluciones tecnológicas integradas de Ciberseguridad, Cloud, IoT, Big Data, Inteligencia Artificial y Blockchain, con la que acompañamos a nuestros clientes en su transformación digital.

Somos un grupo de más de 6200 personas valientes que trabajamos a diario desde distintos puntos del mundo para alcanzar la excelencia, a través de un liderazgo basado en la transparencia y en el espírItu de equipo. Si te identificas con nuestros pilares, ¡estamos deseando conocerte!

www.telefonicatech.com

¿QUÉ HACEMOS EN EL EQUIPO?

En la unidad de Ciberseguridad y Respuesta a Incidentes de Telefónica, gestionamos, analizamos y mitigamos incidentes de seguridad en tiempo real. Nos especializamos en proteger los activos críticos de nuestros clientes frente a amenazas digitales, asegurando la continuidad del negocio y minimizando riesgos. Trabajamos estrechamente con equipos multidisciplinarios para garantizar una respuesta efectiva y adaptada a las necesidades de cada organización.

¿CÓMO SERÁ TU DÍA A DÍA?

Tu misión será garantizar la correcta identificación, análisis y respuesta ante incidentes de seguridad informática, aplicando las mejores prácticas en ciberseguridad y trabajando en coordinación con los equipos N1 y N3. Tu día a día:

Tu día a día incluirá:

Monitorizar y gestionar alertas provenientes de herramientas de seguridad (SIEM, EDR, IDS/IPS, etc.).
Analizar y priorizar incidentes detectados, identificando su impacto y origen.
Ejecutar planes de contención, erradicación y recuperación de incidentes.
Colaborar con equipos internos y externos en la investigación de incidentes complejos.
Generar informes detallados sobre eventos, incidentes y tendencias de seguridad.
Proponer mejoras a las políticas y procedimientos de ciberseguridad.
Escalar incidentes a los niveles superiores (N3) cuando sea necesario.
Contribuir a la actualización y mantenimiento de indicadores de compromiso (IoCs).
Participar en simulaciones de respuesta a incidentes y ejercicios de ciberseguridad.

Y PARA ELLO, CREEMOS QUE SERÍA IDEAL QUE CONTARAS CON...

Experiencia

Más de 2 años en roles relacionados con análisis de ciberseguridad, gestión de incidentes y operaciones de SOC/CERT.
Experiencia previa en entornos de alta criticidad.
Conocimientos avanzados en análisis forense digital, ciberinteligencia y conocimientos medios en técnicas de hacking ético y análisis de malware.
Familiaridad con marcos y estándares de seguridad como NIST, ISO 27001, y MITRE ATT&CK.
Experiencia en la operación de herramientas de SIEM (Splunk, QRadar, etc.) y soluciones EDR/XDR.

Formación

Necesario:

Titulación en Ingeniería técnica Informática o superior, Telecomunicaciones o equivalente.

Deseables:

Certificaciones relevantes como GCFA, GCFE, CEH, CompTIA Security+, o similar.

Conocimientos técnicos

Configuración y análisis de herramientas de seguridad (SIEM, IDS/IPS, EDR, firewalls, WAF).
Adquisición y análisis de artefactos mediante el uso de herramientas forenses (KAPE, Velociraptor, Eric Zimmerman, Sysinternals, Nirsoft, xways, Wireshark, tcpdump, etc).
Identificación de Indicadores de Compromiso (IoCs) y análisis de TTPs de atacantes.
Scripting para automatización de tareas (Python, PowerShell, Bash).
Conceptos en gestión de vulnerabilidades y análisis de riesgos.

Para desempeñar el rol, las skills que encajarían con el equipo y el proyecto serían:

Resolución de problemas: capacidad para analizar situaciones complejas y tomar decisiones rápidas.
Trabajo en equipo: habilidades para colaborar con múltiples equipos bajo presión.
Comunicación efectiva: transmitir hallazgos técnicos a audiencias no especializadas.
Proactividad: actitud orientada a la mejora continua de procesos y herramientas.
Pensamiento crítico: anticipar posibles impactos y mitigarlos antes de que ocurran.

IDIOMAS

Obligatorio: Idioma Catalán, hablado y escrito.
Valorable: inglés nivel avanzado (B2/C1), tanto escrito como hablado, para interactuar con proveedores.