Senior SOC Engineer

We are looking for a hands-on Senior SOC Engineer to join our team at our offices in Terrassa (Barcelona) to help design build and continuously improve the technology that powers our Security Operations this role youll own the engineering backlog across SIEM SOAR EDR/XDR and log pipelinesdeveloping high-fidelity detections efficient workflows and resilient security data infrastructure.

Working closely with the SOC Leader and analyst teams youll serve as a technical escalation point for complex incidents and help strengthen the SOC through automation process improvement and reliable engineering solutions. The ideal candidate combines strong security engineering expertise with a practical collaborative approach and a passion for enabling analysts to respond more effectively.

Key Responsibilities

• Design develop and maintain detection content across SIEM EDR/XDR and NDR platforms aligned to MITRE ATT&CK TTPs owning the full use case lifecycle from requirements through to tuning and deprecation.
• Build and optimise SOAR playbooks and automated response workflows identifying and implementing automation opportunities across triage enrichment containment and evidence collection.
• Own the onboarding of new log sources and manage data ingestion pipelines for cost-effectiveness completeness and reliability.
• Act as Tier 3 technical escalation for complex investigations and high-severity incidents supporting forensic analysis malware triage and root cause determination.
• Maintain the health performance and reliability of core SOC platforms and evaluate new tooling aligned to the SOCs maturity roadmap.
• Partner with IT Cloud Network and Identity teams to improve log coverage and response integration and mentor Tier 12 analysts on detection logic and tooling.
• Ensure detection and engineering controls support relevant compliance requirements and maintain audit-ready documentation across platforms and pipelines.

Qualifications :

Required Qualifications:

• 58 years in cybersecurity with 3 years in a SOC engineering detection engineering or senior analyst role.
• Deep hands-on expertise with SIEM platforms including query authoring and detection rule development.
• Proven experience building SOAR playbooks and automating security workflows.
• Strong knowledge of attacker TTPs and the MITRE ATT&CK framework with the ability to translate them into detection logic.
• Experience with log onboarding data normalisation and pipeline management at scale.
• Solid understanding of EDR/XDR NDR cloud telemetry and identity signals.
• Scripting or development skills (e.g. Python PowerShell KQL) for automation and tooling integration.
• Clear written and verbal communication with the ability to document technical content for varied audiences.

Preferred Qualifications:

• Certifications: GIAC (GCIA GCED GCIH GCFA GMON) Microsoft SC-200 or equivalent cloud security certifications.
• Experience with threat hunting methodologies and proactive adversary detection.
• Exposure to offensive security red teaming or purple team exercises.
• Experience in OT/ICS security environments (if relevant to the business).
• Familiarity with data privacy eDiscovery and chain-of-custody requirements during investigations.

Additional Information :

We kindly ask you to apply in English.

Availability to travel (approximately 1020%) when required (HQ in Germany).

Por Syntegon y sus subsidiarias la diversidad es una preocupación clave. Exclusivamente promovemos un ambiente donde todos los empleados independientemente de su género edad origen religión orientación sexual identidad de género o necesidades especiales sean tratados de manera equitativa. Si esta oferta de trabajo utiliza únicamente la forma masculina es por razones de legibilidad y se refiere a individuos de todos los géneros.

Remote Work :

No

Employment Type :

Full-time