Cyber SOC L3 Senior Analyst (Hybrid)

About the role

EY GDS Spain is looking for a senior Cyber SOC L3 analyst in Malaga, working in a hybrid setting. The SOC L3 team handles complex, high-priority incidents and works 24x7 on threat detection and response. You will lead incident response, investigate attacks and guide junior responders.

Key responsibilities

• Lead the response to high-severity incidents and coordinate with other teams
• Gather and preserve evidence, collect data, analyse forensic data and present findings to stakeholders
• Investigate incidents to determine the root cause and formulate response and recovery steps
• Analyse packet captures with tools such as Wireshark and TCPdump, and perform endpoint analysis, live response and memory collection
• Proactively search for threats and vulnerabilities, and analyse threat intelligence
• Review and improve incident response processes and playbooks, and document incidents and lessons learned
• Prepare incident reports and executive summaries, take part in incident response calls and post-incident reviews
• Mentor and guide lower-level incident responders

Required profile

• Ideal candidate: 5+ years of security-related experience in Security Operations, Incident Response and Forensic Investigation
• Experience with digital forensics tools and techniques
• Understanding of security principles such as SANS Top 20 Critical Security Controls and OWASP Top 10
• Willingness to work in a 24/7 operations center (shift work required)
• Bachelor's degree in Information Technology and a certification such as CEH, CHFI, Sec+, ITILv3, GCFA, ECIH, GCIH or CySA+ are ideal

Required skills

• Proficiency with SIEM tools such as Splunk, Microsoft Sentinel, LogScale, Google Chronicle, IBM QRadar or equivalents
• Experience with EDR/XDR platforms such as CrowdStrike, Microsoft Defender, SentinelOne, Cortex XSIAM, Carbon Black or similar
• In-depth knowledge of network protocols, operating systems and security technologies
• Familiarity with malware analysis and reverse engineering
• Scripting proficiency (e.g. Python, PowerShell) for automation

What we offer

• Hybrid work model
• Tailored training and development programs
• Well-being programs including psychological support sessions
• Volunteering opportunities and performance recognition programs