Senior SOC Engineer

We are looking for a hands-on Senior SOC Engineer to join our team at our offices in Terrassa (Barcelona) to help design, build, and continuously improve the technology that powers our Security Operations Center. In this role, you’ll own the engineering backlog across SIEM, SOAR, EDR/XDR, and log pipelines—developing high-fidelity detections, efficient workflows, and resilient security data infrastructure.

Working closely with the SOC Leader and analyst teams, you’ll serve as a technical escalation point for complex incidents and help strengthen the SOC through automation, process improvement, and reliable engineering solutions. The ideal candidate combines strong security engineering expertise with a practical, collaborative approach and a passion for enabling analysts to respond more effectively.

Key Responsibilities

• Design, develop, and maintain detection content across SIEM, EDR/XDR, and NDR platforms, aligned to MITRE ATT&CK TTPs, owning the full use case lifecycle from requirements through to tuning and deprecation.
• Build and optimise SOAR playbooks and automated response workflows, identifying and implementing automation opportunities across triage, enrichment, containment, and evidence collection.
• Own the onboarding of new log sources and manage data ingestion pipelines for cost-effectiveness, completeness, and reliability.
• Act as Tier 3 technical escalation for complex investigations and high-severity incidents, supporting forensic analysis, malware triage, and root cause determination.
• Maintain the health, performance, and reliability of core SOC platforms and evaluate new tooling aligned to the SOC's maturity roadmap.
• Partner with IT, Cloud, Network, and Identity teams to improve log coverage and response integration, and mentor Tier 1–2 analysts on detection logic and tooling.
• Ensure detection and engineering controls support relevant compliance requirements and maintain audit-ready documentation across platforms and pipelines.